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Abstract 

We  present  a  new  model  of  machines  and  their  operation,  called  temporal  automata. 
Characteristics  of  this  model  include  explicit  representation  of  process  time,  symmet¬ 
ric  representation  of  a  machine  and  of  the  enviroment  in  which  it  operates,  the  wiring 
together  of  asynchronous  automata,  and  the  ability  to  aggregate  individual  machines 
to  form  one  machine  at  a  coarser  level  of  granularity.  We  present  the  mathematical 
theory  of  temporal  automata,  and  provide  examples  of  applying  the  model.  We  then 
relate  temporal  automata  to  traditional  constructs  such  as  finite  automata  and  Turing 
machines,  as  well  as  to  more  recent  formalisms  such  as  statecharts  and  situated  au¬ 
tomata.  Finally,  we  briefly  describe  a  formal  language  for  defining  temporal  automata, 
a  compiler  for  that  language,  and  a  simulator  for  the  output  of  that  compiler. 
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1  Introduction 


In  this  document  we  present  a  new  model  of  machines  and  their  operation.  By  a  ‘machine’ 
we  mean  any  structure  participating  in  a  process,  be  it  electronic,  mechanical  or  biological. 
Although  we  will  often  use  the  term  ‘computation,’  it  should  be  understood  in  the  general 
sense  of  ‘process.’  Many  models  of  computation  already  exist,  and  so  we  should  first  motivate 
the  introduction  of  a  new  one. 

1.1  Motivation  and  overview 

The  motivation  behind  our  computational  model  lies  in  applications  in  which  time  plays  a 
crucial  role,  and  in  which  the  environment  is  as  important  as  the  computing  elements.  In 
addition,  our  model  is  natural  for  applications  that  exhibit  natural  partitioning  of  computa¬ 
tional  elements,  as  well  as  a  natural  hierarchy  on  these  computing  elements.  Two  examples 
of  such  applications  are  robotics  (and  real-time  systems  in  general),  and  Agent-Oriented  Pro¬ 
gramming  [17]  (in  which  the  computing  elements  are  agents  exchanging  knowledge,  beliefs 
and  commitments). 

We  are  aware  of  much  past  and  present  work  that  is  closely  related  to  our  model.  Nonethe¬ 
less  we  believe  that  our  model  introduces  some  novel  features,  besides  being  natural  and 
theoretically  sound.  It  shares  with  most  models  some  basic  features,  such  as  machines  hav¬ 
ing  state,  input  and  output,  and  some  notion  of  the  current  state  and  output  depending  on 
previous  state  and  input.  However,  other  features  of  our  model  distinguish  it  from  previous 
models.  Some  recent  models  incorporate  some  of  these  features,  but,  to  our  knowledge,  none 
incorporate  all.  The  following  intuitively-described  features  of  our  model  are  later  developed 
rigorously. 

•  Each  operation  of  the  machine,  be  it  rotating  the  camera  by  30  degrees  or  taking  a 
touch-sensor  reading,  requires  time.  Different  operations  in  different  machines  require 
radically  different  times,  leading  to  asynchrony.  Temporal  automata  explicitly  repre¬ 
sent  the  duration  of  computation,  allowing  for  different  temporal  models  in  different 
machines.  Indeed,  one  of  our  initial  motivations  was  reasoning  about  real-time  systems 
in  general,  and  robotics  equipment  in  particular, 

•  In  general,  a  machine  alone  does  not  define  a  computation;  rather  it  is  the  machine 
coupled  with  its  environment  that  together  define  the  computation.  Furthermore,  just 
as  the  machine  changes  state,  so  does  the  environment.  The  changes  in  the  environment 
and  in  the  machine  are  mutually  constraining.  Only  in  the  special  case  of  closed 
machines  is  the  computation  independent  of  the  environment. 

•  Like  the  machine,  the  environment  too  has  structure,  governing  its  state  changes.  In 
fact,  the  environment  is  simply  another  machine.  In  order  for  the  machine  and  the 
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environment  to  affect  one  another,  therefore,  one  must  introduce  the  notion  of  the 
wiring  together  of  machines. 

(Although  it  will  play  no  role  in  the  formal  development  of  the  model,  there  is  a 
conceptually-useful  analogy  to  kinematics  here.  In  the  late  19th  century,  F.  Reuleaux 
lay  the  foundation  to  modern  kinematics  by  introducing  the  concept  of  the  kinematic 
pair  as  the  basic  unit  of  analysis  [13].  The  simple  underlying  observation  was  that  the 
possible  motions  of  an  object  are  only  defined  relative  to  another  object  with  which  it  is 
in  contact.  Only  relative  to  such  a  joint  can  the  (rotational  and  translational)  freedom 
of  an  object  be  specified.  Furthermore,  the  object  and  the  obstacle  are  completely 
symmetric,  both  being  rigid  3D  objects.  By  analogy,  we  can  now  speak  about  the 
informatic  pair,  a  pair  of  machines,  as  the  basic  unit  of  analysis  in  computer  science.) 

•  In  fact,  the  machine-environment  pair  is  only  a  special  case  of  the  wiring  together  of 
several  temporal  automata.  In  general  we  have  a  collection  of  machines  that  are  wired 
together  in  a  mutually  constraining  fashion.  So  we  can  easily  model  complex  systems, 
each  module  of  the  system  being  a  temporal  automaton  wired  to  the  others. 

(This  generalization  is  perfectly  congruent  with  the  analogy  to  kinematics,  since,  after 
introducing  the  basic  kinematic  pair,  Reuleaux  defined  the  more  general  kinematic 
chain]  however  in  our  context  the  word  ‘chain’  would  be  misleading,  suggesting  a 
necessarily  linear  wiring). 

•  A  collection  of  machines  and  a  wiring  among  the  machines  together  induce  a  new  ma¬ 
chine.  Intuitively,  the  inputs  (outputs)  of  the  new  machine  are  those  of  the  individual 
machines  that  are  not  wired  to  an  output  (input)  of  a  machine  in  the  collection.  (Note 
that  since  different  machines  may  have  different  models  of  time,  there  will  be  some 
subtlety  in  defining  the  wiring  together  of  arbitrary  machines.)  Thus  one  can  reason 
about  a  collection  of  temporal  automata  as  a  single  system.  This  introduces  many 
different  levels  of  granularity,  and  we  can  hierarchically  decompose  complex  systems, 
starting  with  a  ‘black  box’  model  and  descending  to  as  much  detail  as  is  desired. 

1.2  Organization  of  the  report 

Sections  2,  3  and  4  define  the  model.  Section  5  presents  two  examples  of  actual  machines  and 
their  descriptions  in  our  framework.  Section  6  relates  the  model  to  the  standard  constructs 
of  finite  automata  and  Turing  machines.  Section  7  and  8  relate  the  model  to  more  recent 
models  that  share  some  of  the  features  of  our  model.  Section  9  presents  a  formal  language 
in  which  to  define  machines,  and  briefly  describes  a  program  which  simulates  the  behavior 
of  machines  thus  defined  (a  full  description  of  the  simulator  is  provided  separately  in  [9]). 
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1.3  A  sample  automaton 


Some  of  the  folowing  sections  are  rather  abstract  and  it  will  help  to  couple  them  with  a 
concrete  example.  We  therefore  now  define,  using  the  graphical  conventions  of  finite-state 
automata,  a  particular  standard  deterministic  finite  automaton  (or  a  Mealy  machine),  called 
M,  to  which  we  will  make  reference  later  in  the  text. 


Figure  1  :  The  automaton  M 

The  meaning  of  this  representation  is  conventional;  for  example,  if  the  M  receives  the 
signal  a  while  in  state  A,  it  will  emit  the  signal  1  and  change  to  state  B. 


2  Preliminary  definitions 

2.1  Time  structures 

Any  model  of  machines  or  computation  must  clearly  define  the  notion  of  time,  as  a  com¬ 
putation  is  a  process  which  evolves  over  time  (indeed,  as  was  mentioned,  we  use  the  terms 
‘computation’  and  ‘process’  interchangeably).  For  example,  the  time  implicit  in  finite  state 
automata  theory  is  a  discrete  succession  of  instants.  These  are  the  instants  in  which  a  new 
input  signal  is  received,  and  based  on  it  a  new  output  signal  is  emitted  and  a  state-change 
occurs. 

We  want  to  be  able  to  model  machines  that  can  be  asynchronous  (not  operating  over 
the  same  periods  and  with  events  not  happening  at  precisely  the  same  time),  and  which  can 
operate  in  continuous  time  or  discrete  time  or  a  mix  of  continous  and  discrete  time.  In  order 
to  achieve  this  goal,  we  allow  different  components  of  a  machine  to  be  defined  at  different 
instants;  thus  we  need  to  express  the  instants  at  which  a  component  of  a  machine  is  defined. 
Such  a  set  of  instants  will  be  called  a  ‘time  structure.’  For  example  if  we  want  to  model 
a  controller  that  takes  a  signal  defined  at  any  time  and  every  second  emits  a  command  to 
an  actuator,  we  need  to  talk  about  a  continuous  time  for  the  input  and  a  discrete  time  for 
the  output.  We  will  assume  that  each  computation  has  a  starting  point.  Thus  our  time 
structures  will  be  finite  in  the  past,  and  by  convention  we  will  take  the  initial  point  as  0. 
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The  need  for  the  last  property  in  our  definition  of  time  structure  will  become  clear  when  we 
introduce  other  concepts.  In  the  following,  stands  for  the  non-negative  reals  and  N  for 
the  non-negative  integers. 

Definition  i  :  A  time  structure  is  a  set  T  included  in  or  equal  to  such  that  0  €  T  and 
yt€R+,sup{x€T\x<t}eT. 

This  last  property  means  that  T  is  closed  on  its  right. 

Examples  : 

-  R+ 

-  N 

-  Ns  =  {t  e  R^  \  t  =  k*S  {oT  some  k  £  N} 

2.2  Entities 

As  was  said  in  the  introduction,  a  machine  has  inputs,  internal  states  and  outputs.  All 
three  have  the  common  property  of  taking  values  over  time.  Since  the  machine  may  be 
asynchronous  we  need  a  time  structure  for  each  input,  internal  state  or  output.  Similarly, 
inputs,  internal  states  and  outputs  may  differ  on  the  domain  from  which  they  take  their 
values.  For  example,  usually  the  input  of  a  digitizer  takes  its  values  over  R  and  its  outputs 
take  their  values  over  a  discrete  set.  So  each  input,  internal  state  and  output  must  have  a 
time  structure  and  a  domain  of  values.  Below  we  define  the  neutral  term  entity,  which  may 
in  fact  be  an  input,  an  internal  state  or  an  output.^ 

Consider,  for  example,  the  automaton  M  defined  in  section  1.3.  For  M  we  can  define 
three  entities,  an  input  entity  i  which  takes  its  values  from  the  set  {a,  7},  an  internal  state 

entity  s  which  takes  its  values  from  the  set  {A,B,C,D},  and  an  output  entity  which  takes 
its  values  from  the  set  {0, 1}.  If  we  assume  that  the  input  arrives  at  regular  intervals  we  can 
take  the  time  structure  of  the  three  entities  to  be  equal  to  N, 

An  entity  is  formally  define  as  follows. 

Definition  2  :  An  entity  is  a  pair  {T,  D)  where  T  is  a  time  structure  and  D  is  a  domain 
(set  of  values). 

Now  that  we  have  this  notion  of  entity,  we  want  to  be  able  to  speak  of  the  value  taken 
by  this  entity  over  time.  The  notion  is  clearly  a  function  from  T  to  D.  We  call  it  a  trace  of 
the  entity. 

‘An  entity  can  be  thought  of  as  a  variable,  something  that  takes  different  values  over  time;  we  did  not 
use  the  term  ‘variable’  since  it  is  by  now  a  loaded  term. 
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Definition  3  ;  A  trace  of  an  entity  e  =  (T,  D)  is  a  function  v  :  T  D.  The  collection  of 
all  functions  T  —*  D  will  be  denoted  by  Vg. 

A  trace  is  only  defined  on  the  time  structure  of  an  entity.  Sometimes,  however,  we  need 
at  time  t  to  know  what  is  the  Icist  value  an  entity  has  taken.  In  order  to  do  so,  we  must 
identify  the  latest  time  of  T  which  precedes  t  and  take  the  value  of  the  entity  at  that  time. 
For  that  we  define  the  continuous  time  extension  of  the  trace. 

Definition  4  ;  The  continuous  time  extension  of  a  trace  v  of  entity  e  =  (T,  D)  is  the 
function  v  :  —¥  D  defined  by: 

v(t)  =  v(sup{x  €  T  I  X  <  t}) 

So  if  t  6  T  (the  time  structure  of  e)  then  v(t)  =  v(t)  and  otherwise  the  value  of  v  is  the 
last  value  (in  time)  of  v.  Notice  that  by  definition  of  time  structures  we  have  sup{x  €  T  | 
X  <  tj  E  T,  and  therefore  the  continuous  time  extension  of  a  trace  is  well  defined. 


2.3  Causal  functions  and  transductions 


We  now  want  to  define  what  it  means  for  an  entity  e  to  be  a  function  of  other  entities. 
Intuitively  that  means  that  the  value  taken  by  e  is  dependent  on  the  values  taken  by  the 
other  entities. 

For  example,  in  the  sample  automaton  M  the  output  value  at  time  t  is  defined  if  we 
know  the  value  of  the  input  and  the  internal  state  at  time  t.  The  output  depends  onl}^  on 
the  current  input  and  internal  state  and  its  value  is  related  to  the  value  of  the  input  and 
internal  state  by  the  function  defined  by  the  table  of  figure  2. 


input 

state 

a 

7 

A 

1 

1 

0 

B 

0 

1 

1 

C 

1 

1 

0 

D 

0 

1 

0 

Figure  2 


In  this  example  the  output  depends  only  on  the  current  values.  This  is  not  always  the 
case.  The  outputs  of  a  machine  can  depend  at  time  t  on  all  the  inputs  from  0  to  t.  So  the 
idea  of  dependence  of  an  entity  e  on  a  set  of  entities  I  —  {ii,  12, ...}  is  related  to  the  existence 
of  a  function  from  Il.g/Vi  to  Vg.  The  function  associates  to  a  trace  for  all  the  entities  of  7  a 
trace  for  e. 
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We  do  not,  however,  allow  any  arbitrary  functions.  Intuitively,  the  temporal  evolution  of 
a  machine  is  constrained  by  the  principle  of  causality.  The  output  at  time  i  cannot  depend 
on  an  input  which  will  arrive  after  t.  So  we  are  interested  in  only  a  subset  of  the  functions 
from  n,g/Vi  to  Ve  which  we  call  causal  functions  and  which  are  defined  by; 


Definition  5  ;  A  function  f  from  to  Vg,  where  14  denotes  the  set  of  function  from 

the  time  structure  Tk  to  the  domain  Dk,  is  a  causal  function  iff: 

V(v.i,u,j,...),(t;;j,v;j,...)  €  Ilig/K-,  €  Tg 

[yik  €  /,  Vi^  =  on  Ti,  D  [0,t]]  =>  f{vi,,Vi^,...){t)  =  f{v[^,vl^,...){t) 

This  definition  means  that  when  an  entity  e  depends  on  the  set  of  entities  I  according 
to  the  causal  function  /,  if  you  take  two  histories  (i.e.  a  trace  for  each  input  which  by  / 
will  define  a  trace  for  e  )  and  if  e  takes  different  values  at  time  t  for  those  histories  then  the 
inputs  must  differ  at  some  time  before  t  in  the  two  histories. 

Causal  functions  are  the  most  general  concept  that  will  support  the  definition  of  machines, 
but  in  fact  they  are  too  general  to  be  of  practical  use.  Instead  we  now  introduce  a  suljset 
of  causal  functions  called  transductions.  The  intuition  behind  the  definition  is  that  usually 
a  part  of  a  machine  (an  entity)  takes  as  inputs  the  value  of  other  parts  of  the  machine, 
performs  a  computation  for  some  amount  of  time  (say  <?),  and  outputs  the  value  of  the 
computation.  This  transduction  is  initiated  at  every  instant  of  the  entity’s  time  structure. 
The  computation  can  be  characterized  by  a  function  from  the  domains  of  the  inputs  to  the 
domain  of  the  output  and  the  delay  S.  The  following  definition  captures  this  intuition,  as 
well  as  some  information  about  the  initialization  of  the  entity  and  about  the  way  to  take  the 
values  of  the  inputs. 


Definition  6  ;  A  transduction  is  a  tuple  {e,I,6,finit,f)  where  e  is  an  entity  {Tg,Dg),  1  is 
a  set  of  entities,  S  is  a  nonnegative  real,  /,„,t  is  a  function  from  Tg  H  [0, 6)  to  Dg  and  f  is  a 
function  from  Flig/ A  to  Dg.  The  transduction  defines  a  function  F  from  n,g/Vi  to  Vg  such 
that  V(vjj,  Uij, ...)  €  Ilig/Vt  . 


finitit)  yt€Tg\t<6 

f{v-{t  -  S),vi;{t  -  6), ....)  yteTg\t>  8 


In  the  above  definition  we  provide  a  function  which  defines  the  value  of  the  entity 
before  the  entity  has  performed  the  first  calculation.  (Notice  that  if  6  =  0  then  finu  plays 
no  role,  and  if  Tg  H  [0,5)  =  {0}  then  only  /,mt(0)  plays  a  role.)  Notice  also  the  use  of  the 
continuous  time  extention  function  vi  rather  than  the  trace  u,-  itself:  an  entity  need  not  be 
synchronized  with  its  inputs,  that  is,  the  instant  at  which  the  input’s  value  is  needed  in  order 
to  determine  the  value  of  an  entity  need  not  lie  in  the  time  structure  of  the  input.  If  it  does 
not  then  the  input  value  taken  is  the  last  value  of  the  input  available  at  the  current  time. 
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Terminology.  We  will  say  that  a  transduction  (e,  1, 8,  /)  is  from  I  to  e.  If  5  >  0  then 

we  will  call  the  transduction  a  durational  transduction. 

We  have  the  following  property  which  relates  transductions  to  causal  functions: 

Proposition  1  :  A  transduction  {e,  1 ,8,  finiu  f)  where  either  e  ^  I  or  8  ^  0  defines  a  causal 
function  from  n,g/\{e}Vi  to  Ve 

(See  appendix  A  for  a  proof  of  this  proposition.) 

Notice  in  particular  that  a  durational  transduction  with  feedback  is  still  causal. 

example;  Let  us  illustrate  the  concept  of  entity  and  transduction  with  a  small  example 
of  an  entity  implementing  a  simple  clock,  a  common  device  needed  to  implement  features 
such  as  time  out.  The  clock  keeps  track  of  the  time  elapsed  since  the  emission  of  a  signal. 
Specifically,  the  value  of  the  clock  is  zero  until  it  is  activated,  and  from  then  on  it  increases 
in  increments  of  c,  the  clock  grain  size. 

We  first  define  the  function  /  of  two  variables  start  and  clock: 

f  0  if  clock  =  0  and  start  =  0 

/{start,  dock)  =  I  ^ 

If  the  entity  start  emits  the  signal  we  want  to  keep  track  of,  then  the  entity  clock  = 
{Ne,  R)  (where  for  k  €  A^})  and  the  transduction  {clock,  {start,  clock},  e,  (0, 0),  /) 

will  implement  a  clock  giving  the  amount  of  time  elapsed  since  the  emission  of  the  signal 
with  a  precision  of  e  .  We  will  have  Vciock{k  *  e)  =  f{vstart{{^  —  1)  *  c),  Vciock{{k  —  1)  *  e)).  So 
according  to  the  definition  of  /,  as  soon  as  Vgtart  becomes  1,  Vciock  will  start  to  increase  by  e 
every  c  seconds.  Then  in  every  history  the  value  of  the  entity  clock  can  be  use  to  implement 
time-out  or  other  time-dependent  behavior. 


3  Causal  systems  and  temporal  automata 

We  have  now  all  the  elements  needed  to  introduce  our  computational  model.  We  first  define 
the  general  notion  of  causal  systems. 

Definition  7  ;  A  causal  system  is  a  tuple  (/,  0,  f)  where  I  is  a  set  of  input  entities,  0  is 
a  set  of  output  entities  and  f  is  a  causal  function  from  to 

^i.e.  f  is  a  family  of  causal  functions  {fo}o^o  with  /.  :  Ilig/Vi  — ►  Vo 
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The  temporal  evolution  of  a  causal  system  depends  on  the  traces  of  the  input  entities. 
The  environment  of  a  causal  system  determines  the  traces  of  the  input  entities  and  thus  the 
history  of  this  machine. 

With  each  element  u.j, ...)  of  Il.g/Vi  provided  by  the  environment  we  have  an  history 
for  the  machine.  For  each  history  the  value  of  the  entity  e  at  time  f  €  Tg  is  u,(t)  if  e  =  7  €  / 
and  /o(u,i ,  if  e  =  o  €  0. 

As  was  said  in  the  previous  section,  causal  functions  are  somewhat  too  general  to  provide 
a  useful  model  of  computation.  We  therefore  now  define  a  more  specific  form  of  causal 
systems,  temporal  automata. 

To  define  temporal  automata  we  will  use  the  notion  of  transductions  which  are  special 
causal  functions.  But  first  we  introduce  some  more  notation. 

Suppose  we  have  a  set  E  of  entities  and  a  set  of  transductions  from  a  set  included  in  E 
to  some  entities  of  E  such  that  there  is  at  most  one  transduction  to  each  entity  of  E.  We 
want  to  define  the  set  of  entities  on  which  an  entity  e  depends. 

We  introduce  two  relations  "D  and  X^.  The  semantics  of  e'Da  is  that  the  transduction  to 
e  is  from  a  set  including  a.  The  meaning  of  eV^a  is  that  the  transduction  to  e  is  from  a  set 
including  a  and  has  a  null  delay.  We  denote  by  X^(e)  (  I^(e))  the  sets  of  entities  standing 
in  relation  V  (V^)  with  e. 

Formally  we  define  the  relation  V  for  each  entity  of  E  as  follows:  if  there  is  a  transduction 
to  e,  {e.  A,  6,  finit,  f)  then  X>(e)  =  A,  otherwise  P(e)  =  0. 

The  definition  of  is  similar:  if  there  is  a  transduction  to  e,  (e,  A,  0,/,„ji,  /)  then 
P°(e)  =  A,  otherwise  X^(e)  =  0. 

The  transitive  closure  of  those  relations  for  the  entity  e  will  be  denote  by  A(e)  and  A°(e)  . 
If  we  have  'Do{e)  =  T>(e)  and  the  equation  X?„+i(e)  =  Ue'gx»„(e)T>(e'),  then  A(e)  =  U„gA7^^n(e). 
This  set  A(e)  is  exactly  the  set  of  the  entities  on  which  e  depends.  The  definition  of  A°(e)  is 
similar  but  with  the  relation  instead  of  V.  The  set  A°(e)  is  exactly  the  set  of  the  entities 
on  which  e  depends  with  a  null  delay. 

We  have  now  all  the  elements  needed  to  define  a  temporal  automaton. 

Definition  8  ;  An  temporal  automaton  is  a  tuple  (I,  S,  0,T )  where: 

-  I  is  a  set  of  input  entities, 

-  S  is  a  set  of  internal  (state)  entities, 

-  0  is  a  set  of  output  entities  , 

-  T  is  a  set  of  transductions  with  the  following  properties: 

Ve  €  5"  U  0,  T  has  a  unique  transduction  to  e  and  this  transduction 

is  from  a  set  included  in  I  S 

Ve  €  S'  U  0,  A(e)  is  finite  and  e  ^  A°(e) 
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We  will  later  relate  this  definition  to  the  general  definition  of  a  causal  system.  Let  us 
first  illustrate  this  definition  by  encoding  in  it  the  automaton  M  defined  in  Section  1.3.  As 
we  said  before,  the  automaton  M  has  three  entities: 

-  the  input  entity  i,  {N, 

-  the  internal  state  entity  s,  [N,  {A,  B,  C,  D]) 

-  the  output  entity  o,  {N,  {0,1}) 

The  transduction  for  o  is  essentially  defined  by  the  function  of  Figure  2  whose  name  will  be 
/.  In  addition  we  have  <5  =  0  as  in  finite  automata  theory  the  output  is  simultaneous  with 
the  input.  So  the  output  transduction  is  (o,  {i,s},0, 0,/). 

The  transduction  for  s  is  essentially  defined  by  the  function  g  of  the  figure  below.  If 
we  assume  that  initially  s  has  value  A  ,  we  have  for  finit  the  function  which  associates  A 
with  time  0.  The  delay  for  s  is  1  as  in  the  finite  automata  theory  an  input  produce  a  state 
transition  by  the  time  the  next  input  arrives.  So  the  transduction  for  s  is  (s,  {i,  s) ,  1,  finit-,  o)- 


input 

state 

a 

/? 

7 

A 

B 

C 

D 

B 

B 

C 

C 

C 

D 

D 

c 

D 

B 

D 

B 

Figure  3 

The  temporal  automaton  evolves  according  the  following  equations: 

€  {a,/0,7}^ 

Vo(0  =  f{vi{t),  Vs{t)) 

Vsit)  =  -  1))  if  <>  0 

u,(0)  =  AD 

In  the  definition  of  temporal  automata,  the  property  of  the  transductions  assures  that 
each  internal  or  output  entity  does  not  depend  on  an  infinity  of  entities  and  that  there  is  no 
loop  of  zero  delay  transductions  between  internal  entities.  Note  that  the  condition  on  A° 
always  holds  for  an  output  entity  o  because  A®(o)  C.  I U  S. 

However,  our  definition  of  temporal  automaton  allows  the  transductions  to  be  from  S . 
This  might  seem  to  be  a  problem  because  the  transductions  to  an  entity  of  S  use  S  itself. 
Actually  we  have  the  following  proposition  which  guarantees  that  because  there  is  no  loop 
of  non-durational  transductions  a  temporal  automaton  is  indeed  a  causal  system. 


9 


Proposition  2  ■  If  M  is  a  temporal  automaton  (/,  5",  O,^)  then  there  exists  a  unique  causal 
function  from  Ilje/Vi  to  Ileesuo^  which  satisfies  the  transductions  equations. 

(See  appendix  A  for  a  proof  of  this  proposition). 

Therefore  a  temporal  automaton  {I,S,0,T)  induces  a  causal  system  (/,0,/r)  where 
fr  is  the  projection  of  the  unique  causal  function  from  Iljg/Vi  to  Ilegsuo^e  which  satisfies 
the  equations  of  T  on  We  will  call  this  function  the  function  induced  by  the 

transductions  of  T. 

Before  going  on,  let  us  define  exactly  when  two  systems  (temporal  automata  or  causal 
systems)  are  equivalent. 

Definition  9  :  Two  systems  M  and  M'  (M  and  M'  can  be  either  causal  systems  or  tempoi  al 
automata)  are  equivalent  iff: 

-^9  a  one  to  one  mapping  from  I'  onto  I  \  Vf'  £  I'  i'  —  g{i') 

-  3h  a  one  to  one  mapping  from  0  onto  O'  |  Vo  €  O  o  =  h{o) 

-'^o  £  O,  V(vij,  Vjj, ...)  €  n,g/Vi, 

where  f  and  f  denotes  either  the  causal  function  (for  a  causal 
system)  or  the  causal  function  induced  by  the  transductions 
(for  a  temporal  automaton)  and  the  projection  of  f  on  Vo. 


4  Aggregating  temporal  automata 

^Ve  now  have  a  complete  definition  of  temporal  automata.  ^Ve  have  been  conceined  with 
developing  a  model  which  is  general,  mathematically  precise,  and  at  the  same  time  is  a 
natural  medium  in  which  to  encode  actual  machines.  The  mathematical  precision  will  enable 
us  later  to  compare  our  model  to  classical  models  of  computation.  However,  alongside  the 
theoretical  issues,  we  are  concerned  with  how  readily  actual  machines  can  be  encoded  in 
our  model.  The  definition  of  temporal  automata  was  designed  to  correspond  directly  to  our 
conceptions  of  process,  and  in  the  next  section  we  provide  two  encodings  of  processes  in 
actual  machines.  The  further  development  of  our  model  in  this  section  does  not  increase  its 
expressiveness,  but  does  make  it  an  even  more  practical  tool  for  reasoning  about  machines 
and  processes. 

One  property  of  real  systems  is  that  they  are  typically  composed  of  multiple  intercon¬ 
nected  machines.  For  example  a  robot  has  sensors,  actuators  and  control  modules,  each  of 
which  can  be  considered  as  a  separate  machine.  The  relation  between  these  machines  is  that 
the  outputs  of  some  machines  are  used  as  the  inputs  of  others.  For  example,  the  outputs  of 
a  sensor  are  used  by  a  control  module  which  transmits  its  commands  to  the  actuators. 
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This  ability  to  have  a  modular  description  of  complex  systems  is  essential  if  we  want  a 
model  to  be  useful.  In  our  framework  each  module  of  a  system  can  be  represented  by  a 
temporal  automaton  and  the  interactions  between  them  are  represented  by  the  notion  of  a 
connection.  A  connection  can  be  viewed  as  the  wiring  of  the  output  of  a  machine  to  the 
input  of  another  machine. 

Definition  10  ;  A  connection  from  one  entity  Cj  to  an  entity  62  is  denoted  ei  >  62  or  e^  <1  e^ 
and  is  the  causal  function  f  from  Vi  to  V2  which  associates  to  Vi  €  V\,  V2  =  f{vi)  defined  by 
Vi  €  Te^,  V2{t)  =  ^{t).  (This  definition  implies  that  C  Dg^ .) 


Note  that  the  time  structures  of  ei  and  62  need  not  be  equal;  a  connection  does  not  imply 
a  synchronisation  between  the  two  entities. 

If  we  have  several  causal  systems  we  can  connect  some  output  entities  of  some  systems  to 
the  input  entities  of  some  others.  We  will  speak  about  a  wiring  over  a  set  of  causal  systems 
in  that  case. 

Definition  11  ;  Let  Mk  =  {Ik^Ok,  fk)  be  some  causal  systems.  A  wiring  W  over  the  Mk 
is  a  set  of  connections  such  that  if  e  t>  e'  e  W  then  3k3k'  \  e  e  Ok  and  e'  G  7^/  and  if 
Cl  t>  e'  €  W  and  62  >  e'  €  W  then  ei  =  62. 

A  wiring  over  a  collection  of  causal  systems  defines  a  new  system,  which  we  will  call  the 
system  induced  by  the  wiring.  Intuitively,  the  input  entities  of  this  system  are  all  the  inputs 
which  are  not  involved  in  the  wiring,  and  the  output  entities  are  all  the  outputs  which  are 
not  involved  in  the  wiring.  Formally  it  is  defined  as  follows. 

Definition  12  ;  Let  Mk  =  {Ik,Ok,  fk)  be  some  causal  systems  and  W  a  wiring  over  the  Mk- 
The  system  induced  by  the  wiring  W  is  the  system  with  input  entities  Uklk\{e'  |  e  >  e'  €  W} 
and  with  output  entities  UkOk  \  {e  |  e  >  e'  €  W}. 

What  will  be  the  properties  of  the  induced  system  if  we  connect  two  causal  systems  Mi 
and  M2  as  illustrated  in  Figure  4? 
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Figure  4  :  A  simple  connection  between  temporal  automata 


The  following  proposition  answers  this  question. 

Proposition  3  ;  If  Mi  =  (/i,Oi,/i)  and  M2  =  {h,02,f2)  are  two  causal  systems  and  W 
is  a  wiring  over  Mi,  M2)  such  that  e  t>  €  W  implies  e  €  Oi  and  e'  €  I2  then  the  system 
induced  by  the  wiring  W  over  Mi  and  M2  is  a  causal  system. 

(See  appendix  A  for  a  proof  of  this  proposition). 

What  happens  in  the  special  case  of  wiring  together  temporal  automata?  Of  course, 
since  they  are  causal  systems  the  result  will  be  a  causal  system,  but  will  it  be  a  temporal 
automaton?  We  have  the  following  proposition. 

Proposition  4  ;  If  Mi  =  {Ii,SuOi,Ti)  and  M2  =  {h,S2,02,T2)  are  two  temporal  au¬ 
tomata  and  W  is  a  wiring  over  Mi, M2,  such  that  e  t>  e'  £  W  implies  e  £  Oi  and  e'  £  I2 
then  the  system  induced  by  the  wiring  W  over  Mi  and  M2  is  a  temporal  automaton. 

(For  a  proof  of  this  proposition  see  appendix  A). 

Propositions  3  and  4  deal  only  with  unidirectional  connections  from  one  causal  system 
to  another.  We  will  be  more  general:  complex  systems  are  usually  composed  of  machines 
with  much  more  complicated  interactions,  including  feedback,  as  in  Figure  5. 

For  such  connections  of  temporal  automata  we  have  the  following. 

Proposition  5  ;  Let  Mi, M2,..., Mn  be  n  temporal  automata  and  W  a  wiring  over  Mi, M2,.. -iMn 
such  that  \/e  if  e  >  c'  €  W  then  e  has  a  durational  transduction.  The  system  induced  by  W 
over  Mi,M2,...,Mn  is  a  temporal  automaton. 
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(See  appendix  A  for  a  proof  of  this  proposition). 


Figure  5  :  A  more  complicated  connection  between  temporal  automata 


In  other  words,  one  can  have  arbitrarily  complex  connections  and  still  preserve  the  prop¬ 
erty  of  temporal  automaton,  as  long  as  there  are  only  durational  transductions.  Actuall}^ 
this  result  is  a  special  case  of  a  more  general  proposition  proved  in  the  appendix.  That 
proposition  allows  nondurational  transductions  for  the  connected  output  as  long  as  they  do 
not  introduce  loops  of  zero-delay  transductions. 

The  environment  of  a  machine  provides  the  traces  of  the  unconnected  inputs.  If  we 
can  model  the  environment  itself  by  a  machine,  we  will  obtain  a  closed  system  where  the 
interaction  between  a  machine  and  its  environment  will  be  represented  by  the  connections  of 
the  outputs  of  the  machine  to  inputs  of  the  environment  and  the  connections  of  the  inputs 
of  the  machine  from  entities  of  the  environment.  The  formal  definition  of  a  closed  system  is 
the  following. 

Definition  13  :  A  set  of  temporal  automata  and  a  set  of  connections  define 

a  closed  system  if  for  each  temporal  automaton  Mk  of  this  set,  all  its  input  entities  are 
connected. 
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5  Examples 

This  section  will  present  two  examples  of  temporal  automata. 


5.1  A  mobile  robot 

This  paragraph  contains  a  small  example  encoding  a  simple  local  navigation  procedure  in 
temporal  automata.  Specifically,  we  define  a  temporal  automaton  M  implementing  the 
behavior  ‘Move  forward  in  the  middle  of  the  corridor’  for  a  robot  which  has  two  sonars 
implemented  by  Mi_aonar  and  Mr  .sonar- 

All  the  entities  used  in  this  example  will  have  a  time  structure  equal  io  Ns  —  {k*  8  for 
k  €  N}  where  5  =  50  milliseconds  and  the  internal  and  output  entities  will  have  a  delay  8. 

A  sonar  is  here  a  very  simple  machine  with  one  input  entity  measure  and  one  output 
entity  distance.  Their  domains  are  for  measure^  {0)1}  and  for  distance,  .  The  trans¬ 
duction  to  distance  is  (distance,  {measure},  8,  (0, 0),  /)  with: 

/(measure)  =  if  measure  =  0  then  functionsonarQ  else  0 

The  robot  M  h£is  three  inputs  di,  dr  and  i.  They  represent  the  distance  given  by  the  left 
sonar,  the  distance  given  by  the  right  sonar  and  the  order  given  to  the  robot.  Their  domains 
are  =  Ddr  =  and  D,'  =  {move,  stop}. 

The  robot  has  three  outputs  m,o/  and  Or  which  are  the  order  to  the  robot’s  motor,  the 
order  to  the  left  sonar  and  the  order  to  the  right  sonar.  Their  domains  are  Do,  =  Dor  =  {0, 1} 
and  Dm  =  {forward,  backward,  left,  right,  stay}. 

The  transduction  to  o/  is  (o/,{z},5,  (0,0),^)  with: 
g(i)  =  if  f  =  move  then  1  else  0. 

The  transduction  to  o,  is  similar  (or,  (0,0), ^r). 

The  transduction  to  m  is  (m,  {i,  di,  dr},  8,  (0, 0),h)  with: 

stay  if  f  =  stop 

left  if  i  =  move  and  di  —  dr  >  A 

forward  if  i  —  move  and  —A  ^  di  —  dr  <  A 

right  if  i  =  move  and  di  —  dr  <  —A 


h(i,di,dr)  = 


With  A  =  20  centimeters. 

The  wiring  —  {^r  ^  measurer  .sonars  measurei.sonar^  distancer  .sonar  d,-, 

distancei.sonar  di}  over  M,Mi.sonar  and  Mr  .sonar  induces  a  temporal  automaton.  This 
temporal  automaton  implements  the  behavior  of  a  robot  moving  in  the  middle  of  a  corridor- 
according  to  the  data  provided  by  two  sonars. 
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We  can  show  that  for  this  robot  we  have  \di  —  dr  |<  A  +  4(5  *  c?'  *  u  where  d'  is  an  upper 
bound  for  the  variation  of  the  distance  from  the  wall  to  the  axis  of  the  corridor,  and  v  is  the 
forward  speed  of  the  robot.  So  if  for  example,  d'  =  0.3  and  v  =  Irn.s"^,  we  have  |  di  —  dr\< 
26  centimeters.  Then  if  the  corridor  is  52  centimeters  wider  than  the  robot,  the  robot  is 
guaranteed  collision-free  motion. 


This  temporal  automaton  is  very  simple  because  of  the  simple  environmemt,  sensors  and 
effector  being  modelled.  Modelling  more  realistic  hardware  and  environments  would  require 
more  entities  and  more  complex  transductions,  of  course. 


5.2  A  digital  watch 

This  example  is  borrowed  from  [5]  in  which  Harel  models  the  behavior  of  a  quartz  multi¬ 
alarm  watch  in  the  Statecharts  formalism  (see  discussion  in  section  7).  We  model  the  same 
device  as  a  temporal  automaton.  The  watch  is  depicted  in  the  following  figure. 


b 

c 

d 


The  watch  has  a  main  display  area  and  four  smaller  ones,  a  beeper,  and  four  control 
buttons  denoted  here  o,6,  c  and  d.  It  can  display  the  time  (with  am/pm  or  24  hour  time 
modes)  or  the  date  (day  of  month,  month,  day  of  week),  has  a  chime  (beeps  on  the  hour  if 
enabled),  two  independent  alarms,  a  stopwatch  and  weah  battery  blinking  indication. 

The  four  smaller  displays  indicate  respectively  if  the  alarml  is  enabled,  if  the  alarm2  is 
enabled,  if  the  chime  (beeps  every  hour)  is  enabled  and  if  the  power  is  weak. 
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The  main  display  usually  indicates  the  time.  An  “event”  d  makes  it  displays  the  date. 
A  loop  time,  alarml,alarm2,  chime,  stopwatch  and  time  is  covered  when  events  a  occur. 
If  the  main  display  is  in  a  different  mode  than  time  for  more  than  2  minutes  it  returns 
automatically  to  time.  In  the  mode  time,  if  you  depress  c  for  more  than  2  seconds  you 
switch  to  the  mode  update. 

The  mode  update  is  a  loop  second,  minute,  10  minutes,  hour,  month,  date,  day,  year, 
mode  which  you  can  cover  with  c  events.  In  each  of  the  modes  a  d  event  increments  your 
time  or  date  by  one  unit  of  the  mode  modulo  the  next  mode.  In  the  update  mode  an  event 
b  returns  to  the  time  mode. 

If  your  are  in  alarml  or  alarm2  modes,  an  event  d  change  the  status  of  the  alarm  (enabled, 
disabled).  An  event  c  puts  the  watch  in  a  mode  to  update  the  time  of  the  alarm.  The  loop 
is  hour,  10  minutes,  minute  and  is  covered  with  event  c.  An  event  d  in  the  update  mode 
increments  your  time  of  alarm  by  one  unit  of  the  mode  modulo  the  next  mode.  An  event  h 
returns  to  the  mode  alarml  or  alarm2. 

In  the  chime  mode  an  event  d  enabled  or  disabled  the  beep  every  hour. 

In  the  stopwatch  mode  an  event  b  starts  or  stops  the  chronograph.  An  event  d  resets  it 
to  zero. 

The  beeper  beeps  for  30  second  if  an  alarm  is  enabled  and  the  time  is  equal  to  the  time 
of  the  alarm.  During  this  time  the  depression  of  any  button  stops  the  beeper.  It  also  beeps 
for  2  seconds  every  hour  if  the  chime  is  enabled. 

After  this  informal  description  of  the  watch  (slightly  different  from  that  in  [5]),  we  will 
now  outline  the  main  principles  used  for  building  a  temporal  automaton  with  the  watch’s 
behavior.  The  complete  definition  of  the  temporal  automaton  can  be  found  in  Appendix  B. 

There  are  5  input  entities  which  are  all  defined  on  continous  time  (a  time  structure  equal 
to  R^),  a,  b,c,  d  and  power.  The  first  four  represent  the  status  of  the  four  buttons  and  their 
value  will  be  1  if  the  button  is  depressed  and  0  otherwise.  The  last  one  is  the  the  information 
from  the  battery  and  can  have  3  different  values  {on,  weak, dead}. 

Each  of  the  internal  and  output  entities  will  be  defined  onArj  =  {A;*c|A;€  N}  where 
e  =  10  milliseconds  is  the  precision  of  the  watch  and  the  minimal  time  between  changes  in 
the  watch. 

There  are  7  output  entities.  The  delay  of  all  the  output  entities  will  be  0  since  as  will  be 
seen  they  are  only  transcriptions  of  internal  entities.  Four  of  the  output  entities  will  be  orders 
for  the  display  of  the  four  small  areas  of  the  watch.  There  are  a/1,  a/2,  chime  and  djpower. 
The  value  of  the  first  three  will  be  {on,  off,  none)  and  for  the  forth  {good,  weak,  none}.  The 
fifth  output  is  light  which  will  take  its  value  in  {on,  off},  the  sixth  is  beeper  with  values  in 
{beep,  silent}  and  the  last  is  display  which  will  represent  what  to  display  on  the  main  area 
of  the  watch. 


16 


The  internal  entities  can  be  divided  in  4  groups.  The  first  contains  entities  which  keep 
track  of  the  different  modes  of  the  watch.  These  entities  are  mainjmode,updatejmode, 
timejnode,  chronojmode,  updalljmode  and  updal2j7iodt. 

The  second  group  contains  alarml^tat,alarm2^tat  and  chime^tat  which  encode  the 
status  of  these  features.  Their  domain  will  be  {enabled,  disabled] . 

The  third  group  is  used  to  implement  the  different  time-out  behaviors.  Such  entities  will 
be  2s,  30s  and  2mm.  Their  domain  will  be  R. 

The  last  group  contains  entities  which  are  data.  They  are  time,  date,  allJime,  al2J,ime 
and  chrono.  Their  domain  is  R  and  they  will  be  used  by  the  output  entity  display  to  draw 
the  main  area  of  the  watch. 

The  entities  of  the  first  group  encode  the  different  mode  of  the  watch.  For  example, 
mainjmode  will  take  a  value  in  {tim,  dat,  update,  alarml,  alarm2,  updalarml,  updalarm2, 
chime,  stopwatch].  If  mainjmode  has  value  update  it  means  that  we  are  updating  the  time 
or  the  date  of  the  watch.  If  it  has  value  stopwatch,  it  means  that  the  stopwatch  is  being 
displayed  and  that  the  inputs  on  the  buttons  are  interpreted  as  orders  to  the  stopwatch.  Its 
transduction  is  {mainjmode,  {mainjmode,  a,b,c,d,2s,  2mm,  updatejmode,  updalljmode, 
updal2jmode] ,  e,  (0,  tim),  /).  The  function  /  changes  the  value  of  mainjmode  for  each  event 
a  according  to  the  previous  value  of  mainjmode.  It  uses  the  entities  2mm  and  2s  to  imple¬ 
ment  the  return  in  the  time  mode  after  2  minutes  in  another  mode  and  the  condition  for 
entering  the  update  mode.  According  to  the  previous  value  of  mainjmode,  f  interpretes  the 
actions  on  buttons  b  and  c. 

The  entities  of  the  second  group,  alarmljstat,  alarm2..stat  and  chime..stat  change  value 
if  the  entities  keeping  track  of  the  different  modes  are  in  the  appropriate  mode  and  the  right 
button  is  depressed  {d  actually). 

The  entities  of  the  third  group  are  similar  in  principle  to  the  entity  implementing  a 
clock  presented  in  section  2.3.  They  are  set  to  a  particular  value  on  some  conditions  then 
incremented  (or  decremented)  by  e  at  each  cycle.  When  they  reach  a  particular  value  they 
activate  a  change  in  other  entities. 

The  entities  of  the  fourth  group  store  data.  The  entity  time  for  example,  stores  the  hour, 
minute,  second,  hundredth  of  second  of  the  current  time.  In  normal  mode  it  is  incremented 
by  £  every  cycle.  In  the  update  mode  its  value  is  changed  according  to  the  events  on  buttons 
c  and  d.  The  entity  alljtime  stores  the  time  when  the  beeper  will  be  activated  if  alarml  is 
enabled.  It  is  set  up  in  the  mode  updall  with  buttons  c  and  d. 

The  output  entities  axe  only  transcription  of  internal  entities.  For  example  for  the  four 
small  displays  of  the  watch,  the  output  will  be  the  value  of  the  corresponding  mode  internal 
entity  if  the  power  is  not  dead.  The  beeper  will  be  activated  if  the  value  of  time  matches  the 
value  of  a/1  Jime  and  alarml  is  enabled,  or  time  matches  al2Jtime  and  alarm2  is  enabled, 
or  time  is  on  the  hour  and  chime  is  enabled.  For  the  main  display,  the  output  will  be  the 
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value  of  either  time  or  date  or  chrono  or  allJime  or  al2Jime,  depending  on  the  value  of 
mainjmode. 


6  Relation  to  automata  theory 

While  our  model  relies  on  explicit  representation  of  time,  classical  automata  theory  hides 
the  notion  of  time  in  that  of  transition.  We  believe  that  an  explicit  expression  of  time  has 
several  advantages  when  one  is  concerned  with  modelling  real-time,  real-world  systems  such 
as  robots.  This  is  consistent  with  the  recent  trend  in  the  program  verification  community 
to  incorporate  real-time  notions  into  the  language  for  reasoning  about  the  computation  (cf. 

[3]). 

At  the  same  time  it  is  important  to  understand  the  relation  between  our  model  and  foun¬ 
dational  automata-theoretic  models.  Our  model  is  obviously  an  extention  of  finite  automata, 
but  in  fact  it  is  a  very  radical  extension.  In  particular,  we  have  the  following  property. 

Proposition  6  ;  Any  deterministic  one-tape  Turing  machine  (abbreviated  DTM)  can  be 
simulated  by  a  temporal  automaton. 

(See  appendix  C  for  a  proof  of  this  proposition). 

So  our  model  of  a  temporal  automaton  has  at  least  the  same  computational  power  as  a 
deterministic  one-tape  Turing  machine. 

The  reverse  is  not  true  since  our  model  can  represent  computation  over  continuous  time, 
on  infinite  domains  and  with  an  infinite  number  of  entities.  However,  in  most  practical 
cases,  we  use  our  framework  to  model  systems  where  continuous  domains  or  time  can  be 
approximated  by  discrete  domains  or  time.  In  those  cases  if  the  functions  involved  in  the 
transductions  are  computable,  there  exists  a  deterministic  Turing  machine  able  to  compute 
the  value  of  any  entity  at  any  time. 


7  Relation  to  some  concurrency  models 

The  specific  features  of  our  model  such  as  concurrency  and  composition  make  it  potentially 
closer  in  spirit  to  some  of  the  more  recent  computational  models  geared  towards  concurrent 
computation.  We  briefly  discuss  three  of  the  better  known  ones,  but  we  aware  are  of  the 
fact  that  a  large  number  of  other  models  exist.  We  are  familiar  with  some  of  them®  but, 
we  are  sure,  not  all.  One  purpose  of  this  document  is  to  solicit  comparisons  with  other 

^Partly  through  conversations  with  David  Dill,  which  we  gratefully  acknowledge 
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models  which  we  have  not  mentioned.  The  models  we  do  discuss  here  are  Hoare’s  model 
of  Communicating  Sequential  Processes,  or  CSP  [7],  Milner’s  Calculus  of  Communicating 
Systems,  or  CCS  [10],  and  Harel’s  Statecharts  [6]. 

CSP  is  a  mathematical  model  based  on  the  concept  of  processes.  A  process  is  a  set  of 
traces,  a  trace  being  a  finite  sequence  of  symbols  denoting  events. A  trace  represents  a 
possible  behavior  of  a  process  from  its  beginning  up  to  some  moment  in  time. 

The  main  characteristics  of  CSP  are: 

•  One  can  define  the  sequential  combination  and  summation  of  processes. 

•  You  can  prefix  a  process  by  an  event  and  define  transformation  on  the  events  alphabet. 

•  The  parallel  combination  of  processes  is  defined  with  conditions  on  the  projections  of 
its  traces  on  the  processes  events  alphabet. 

•  The  communication  between  two  processes  is  synchronous. 

•  The  data  structures  are  implemented  via  processes. 

The  main  concept  of  CCS  is  an  algebra  of  behaviors.  These  behaviors  are  built  from  a 
set  of  names  representing  the  possible  events  and  the  operations  defined  on  this  algebra. 

Briefly,  the  major  features  of  CCS  are: 

•  Each  name  of  an  event  is  associated  with  an  input  event  and  an  output  event.  The 
communication  between  behavior  is  synchronous. 

•  One  can  define  the  relabelling,  the  restriction  of  a  behavior  and  add  a  prefix  to  a 
behavior.  One  can  define  the  summation  and  the  parallel  composition  of  behaviors. 

•  Behaviors  axe  defined  usually  by  equations,  often  recursive,  which  may  contain  pro¬ 
gramming  constructs  such  as  conditionals. 

•  The  concept  of  a  communication  tree  is  defined  as  an  interpretation  of  behaviors,  and 
what  it  means  for  a  set  of  behaviors  to  be  observation  equivalent  is  defined. 

We  have  not  carried  out  a  formal  comparison  between  temporal  automata  and  either 
CSP  or  CCS,  but  several  important  differences  stand  out.  Chief  among  these  differences 
is  the  treatment  of  time.  Both  CSP  and  CCS  rely  on  the  basic  notion  of  ‘sequence’;  the 
only  temporal  information  representable  is  precedence.  Furthermore,  in  both  models  all 
communication  is  synchronous,  unlike  in  our  model.  On  the  other  hand  we  share  with  both 

^The  general  sense  of ‘trace’  is  the  S2une  as  in  our  model,  but  the  specifics  are  different.  In  particular,  in 
CSP  (and  CCS)  there  is  no  temporal  information  in  a  trace  other  than  the  order  among  events. 
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models  the  property  that  any  communication  of  information  requires  that  the  participants 
in  the  communication  be  named. 

CSP  and  CCS  are  also  different  from  temporal  automata  in  that  they  are  more  “obser¬ 
vation  based”  in  spirit;  the  emphasis  is  on  describing  the  various  stages  of  the  processes,  not 
the  causal  mechanism  generating  the  process. 

In  this  sense  temporal  automata  are  closer  to  Statecharts.  Statecharts  are  a  visual  formal¬ 
ism  for  the  behavioral  description  of  complex  systems.  They  extend  classical  state-diagrams 
in  several  ways,  while  retaining  their  formality  and  visual  nature.  Like  finite  state  machines, 
Statecharts  are  based  on  states,  events  and  conditions,  with  combinations  of  the  latter  two 
causing  transitions  between  the  former.  Both  states  and  transitions  can  be  associated  in 
various  ways  with  outputs  events,  called  actions,  which  can  be  triggered  either  by  executing 
a  transition  or  by  entering,  exiting  or  simply  being  in  a  state.  The  system’s  inputs  are  thus 
the  external  events  and  its  outputs  are  the  external  actions. 

The  main  features  of  Statecharts  are: 

1.  They  allow  hierarchical  description  of  the  states.  One  can  use  any  combination  of  xor 
and  and  between  states  as  a  new  state. 

2.  One  can  specify  default  entrance  or  historic  entrance  into  a  xor  state. 

3.  One  can  specify  delay  or  timeout  to  exit  from  a  state. 

4.  One  can  encode  actions  and  conditional  entrances. 

The  internal  states,  the  wiring  and  the  hierarchical  description  of  Statecharts  are  ver}' 
similar  to  those  in  temporal  automata.  In  fact,  there  is  a  straightforward  translation  ot 
any  Statechart  into  a  temporal  automaton.  Furthermore,  there  exists  a  graphic  interface 
to  describe  complex  systems  with  Statecharts  which  is  similar  in  spirit  to  the  simulator  for 
temporal  automata  described  in  section  9. 

The  main  difference  between  Statecharts  and  temporal  automata  again  has  to  do  with 
the  representation  of  time;  whereas  we  allow  arbitrary  temporal  structures  and  asynchronous 
communication,  Statecharts  assume  a  discrete  and  synchronous  structure  of  time. 


8  Relation  to  some  recent  models  in  AI 

Several  researchers  in  AI  have  recently  employed  models  of  concurrent  computation,  driven 
by  an  interest  in  representing  physical  agents  embedded  in  a  physical  environment.  Indeed, 
this  has  also  been  our  motivation,  and  temporal  automata  is  intended  as  the  target  language 
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for  the  compiler  in  the  AOP  project  [17].  Unlike  in  our  model,  most  AI  researchers  have 
adopted  a  standard  circuit-like  framework. 

One  example  is  Rosenschein  and  Kaelbling’s  situated  automata  [14].  The  main  purpose  of 
situated  automata  is  to  design  systems  with  provable  epistemic  properties  and  with  provable 
reaction  times.  The  applications  of  this  formalism  are  the  conception  of  highly  reactive 
artificial-intelligence  systems  such  as  intelligent  robots.  The  component  of  situated  automata 
relevant  to  the  present  comparison  is  the  low-level  machine  description,  which  is  done  in 
terms  of  switching  circuits.  The  elements  of  the  circuit  are  either  functional  elements  which 
compute  instantaneously  a  function  of  their  inputs,  or  delay  elements  which  delay  their  input 
by  a  constant  time.  Thus  in  that  framework,  the  model  of  time  is  that  of  the  integers,  and 
all  connections  are  synchronous. 

Similar  properties  are  true  of  Nilsson’s  action  networks  [12].  ACTNET  is  a  language 
for  computing  goal- achieving  actions  that  depends  dynamically  on  sensory  and  stored  data. 
ACTNET  programs  can  be  used  to  control  the  actions  of  a  robot  in  a  dynamic  environment. 

The  ACTNET  language  is  based  on  the  concept  of  action  networks  [11].  An  action 
network  is  a  forest  of  logical  gates  that  select  actions  in  response  to  sensory  and  stored  data. 
The  elementary  unit  of  an  action  net  implements  a  logical  and  gate  as  illustrated  in  figure 
6. 


->  Purpose - 
Precondition- 
Trigger  - 


Action 


figure  6  :  action  unit 


In  contrast  to  our  framework,  ACTNET  allows  only  logical  and  entities,  all  units  are 
synchronous,  and  all  act  instantaneously  and  simultaneously  (i.e.  their  output  is  updated 
as  soon  as  their  inputs  change).  In  a  way,  ACTNET  is  a  synchronous  language  similar  to 
Esterel  [1]. 

ACTNET  does  not  represent  temporal  behavior,  nor  does  it  permit  loops  among  action 
units.  Thus  to  implement  feedback  loops  one  must  rely  on  the  environment  which  updates 
the  sensory  and  stored  data;  ACTNET  itself  does  not  control  those  data. 

In  [4]  Genesereth  discusses  a  continuum  of  agents.  His  main  interest  lies  in  high-level, 
informable  agents  capable  of  acting  on  partial  plans.  In  our  context,  however,  most  relevant 
are  the  lowest-level  agents,  which  are  each  a  finite  automaton,  and  which  interact  by  con¬ 
necting  the  input  of  one  agent  to  the  output  of  another.  Exactly  as  in  our  model,  Genesereth 
accords  equal  status  to  the  agent  and  the  environment,  treating  the  environment  as  simply 
another  agent.  Although  he  does  not  pursue  it,  it  is  possible  in  his  framework  to  aggregate 
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agents  and  create  a  hierarchical  structure.  The  temporal  dimension,  however,  is  absent  in 
the  finite-automata  representation. 

As  a  final  example  from  AI,  we  mention  Brooks’  creatures  [2].  Brooks  has  explored  the 
thesis  that  natural  intelligence  evolved  in  a  bottom-up  fashion,  and  that  artificial  intelligence 
should  be  created  in  the  same  way.  For  this  purpose  he  has  developed  a  so-called  subsumption 
architecture,  in  which  simple  behaviors  are  encoded  and  then  used  to  create  more  complicated 
ones.  All  behaviors  are  implemented  in  a  structure  that  is  essentially  a  switching  circuit.  In 
particular,  no  timing  information  is  present  and  all  communication  is  synchronous. 


9  A  programming  language  based  on  temporal  au¬ 
tomata 


Our  framework  can  be  presented  as  a  language  for  the  description  of  machines.  There  are 
two  advantages  to  presenting  our  model  as  a  programming  language.  First  of  all,  we  can  use 
this  language  to  describe  temporal  automata  and  have  them  interpreted  and  simulated  on 
a  computer.  We  can  also  use  this  language  as  a  target  language  for  the  translation  of  high 
level  specifications  of  an  agent.  By  this  process  we  tranform  a  high  level  specification  into  a 
reactive  system  composed  of  temporal  automata. 

To  study  and  try  to  achieve  an  automatic  translation  we  need  a  formal  definition  of  this 
language  for  the  descriptions  of  temporal  automata. 


This  language  is  defined  in  a  BNF  by  the  following  grammar.  In  the  BNF  notations  used 
here,  {  E  }''■  means  one  or  more  occurrences  of  E;  {  E  }*  means  zero  or  more  occurrences  of 
E,  and  [  E  ]  indicates  that  E  is  optional.  Reserved  words  are  written  in  boldface. 


<program> 
<def  machine> 


<def  connection> 

<def  entity> 
<declaxation> 
<decl  type> 


{  <declaration>  }*  {  <def  machine> 

{  <def  connection>  }*  {  <def  input>  }* 

machine  <ident>  input  {  <def  entity> 
}* 

state  {  <def  entity>  <dependence>}* 
output  {  <def  entity >  <dependence>)* 

connect  (<ident>  <ident>)  (<ident> 
<ident>) 

entity  <ident>  <type>  <t  structure> 

<decl  typo 

type  <ident>  <type> 
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<type> 


<type  name> 

<t  struct ure> 

<dependence> 

<functionT> 

<function> 

<code-function> 

<object> 


<type  predefined> 

|<type  name> 

|list(<type>) 

|(  {  <type>  }+) 

<ident> 

timeN  |  timeR  |  timeD  <real> 

I  time  <code-function> 
depend  <ident>  ({  <ident>  }+) 
<functionT>  <function> 
<code-function> 

|((  0  <object>)  {(<real>  <object>)}*  ) 
({  <ident>  }*)  <code-function> 
a  function  written  in  Lisp 
<integer> 

I  <real> 

I  <boolean> 

I  <character> 


({<object>  }•) 


<integer> 

::=  [-]  <digit>  {<digit>}* 

<real> 

::=  [-]  <digit>  {<digit>} 

{<digit>}* 

<boolean> 

::=  true  |  nil 

<  character  > 

::=  any  printable  character 

<  digit  > 

::=  0|...|9 

<ident> 

::=  <letter>  {<letter>  |  <digit>}* 

<letter> 

::=  a  1  ...|  z  1  A  1  ...|  Z 

The  semantics  associated  with  this  grammar  in  terms  of  temporal  automata  is  rather 
clear  from  the  language.  For  example,  a  <function>  is  the  definition  of  the  function  /  of 
a  transduction.  The  key  word  connect  introduces  4  identifiers  which  are  the  names  of  the 
machine  and  the  entity  from  which  the  connection  starts  and  the  names  of  the  machine  and 
the  entity  which  are  been  connected.  (The  complete  semantics  are  not  given  in  the  report). 

A  program  which  simulates  the  temporal  evolution  of  temporal  automata  has  been  writ¬ 
ten.  This  simulator  takes  a  description  of  temporal  automata  written  in  the  language  de¬ 
scribed  above.  Then  it  simulates  the  evolution  of  the  machine  given  a  trace  for  inputs  from 
the  environment.  The  environment  inputs  can  be  either  given  interactively  by  the  user  or 
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defined  by  a  function. 

Of  course,  time  in  the  simulator  is  discrete  but  the  user  can  use  any  precision  for  time 
he  or  she  needs.  Except  for  this  restriction,  that  domains  and  time  structures  are  discrete, 
all  the  features  of  the  model  are  implemented  in  the  simulator. 

The  interface  of  the  simulator  allows  the  user  to  define  temporal  automata  interactively 
instead  of  describing  them  in  the  language.  When  a  machine  is  defined  the  user  can  simulate 
the  machine  several  times  for  different  traces  of  the  inputs  from  the  environment. 

The  simulator  is  written  in  Lisp  and  the  user  has  access  to  this  language  to  define 
customizations  or  special  interfaces  for  a  particular  simulation. 

For  more  details  on  this  simulator  see  [9]. 

10  Summary  and  concluding  remarks 

In  this  report,  we  have  introduced  a  framework  for  describing  machines  and  related  it  to 
other  work  in  the  area.  We  believe  this  to  be  a  powerful  formalism  in  which  to  represent  the 
low-level  specifications  of  agents.  The  main  advantages  of  this  model  are: 

•  Time  is  explicit.  This  feature  allows  us  to  represent  asynchronous  machines  as  well  as 
machines  with  continuous  or  discrete  time.  We  can  represent  all  temporal  phenomena 
directly  in  our  framework. 

•  Each  entity  has  a  delay.  This  provides  a  realistic  way  in  which  to  represent  computation 
by  hardware.  As  each  entity  has  a  delay,  we  can  represent  by  an  entity  both  very  fast 
and  simple  computations  and  very  long  and  complex  ones. 

•  Modularity.  One  can  define  several  machines,  connect  them  and  consider  again  the 
whole  system  as  a  machine.  This  capability  to  define  smaller  systems  and  then  assemble 
them  together  is  very  useful  when  you  want  to  represent  large  complex  systems. 

•  Several  levels  of  abstraction.  Our  framework  is  convenient  for  representing  different 
levels  of  abstraction  of  a  system.  One  can  express  by  an  entity  either  very  basic 
operations  like  boolean  functions  or  complex  one.  One  can  therefore  treat  a  machine 
as  a  black  box,  and  then  selectively  refine  the  model. 

We  note  that  our  computational  model  deals  only  with  deterministic  systems  whereas 
most  existing  models  include  also  nondeterministic  behaviors.  This  is  not  accidental,  as  we 
aim  in  our  model  to  capture  the  full  causal  mechanism,  whereas  nondeterminism  reflects 
ignorance  of  some  aspects  of  the  machine.  However,  although  we  have  so  far  had  no  reason 
for  doing  so,  it  is  easy  to  define  either  nondeterministic  or  stochastic  versions  of  our  model, 
by  modifying  the  definition  of  a  transduction. 
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Further  theoretical  investigations  of  temporal  automata  are  possible,  including  compar¬ 
isons  with  other  models  and  investigation  of  complexity  issues.  Our  own  interest  lies  in 
testing  the  practical  usefulness  of  the  model.  In  particular,  we  intend  to  use  it  as  a  target 
into  which  to  compile  cognitive  agent  programs  within  the  Agent- Oriented  Programming 
framework. 
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Appendix  A 

Proposition  1  ;  A  transduction  (e,  7,5,/, nit,/)  ^^here  either  e  ^  I  or  6  ^  0  defines  a  causal 
function  from  nie/\{e}Vi  to  Ve 


Proof  :  Let  us  first  treat  the  trivial  case  where  e  ^  7. 

V(uii,Ui2,...),K,t^.V-)  €  Ilie/Vi,  Vt  €  Te 

either  t  <  6  and  then  Ve{t)  =  finit{t)  —  ^e(0 

or  t>  6  and  then  _ 

if  Vu  €  7,  Ui,  =  on  Ti,  H  [0,  t]  then  Vifc  ^  I,  W,  =  <  on  [0,  t] 
so  Ve{t)  =_f{W;{t  -  -  S), ....)  is  equal  to 

v'e{t)  =  fK{t-6)M^{t-8),....) 


Let  us  suppose  now  that  e  €  /  and  6  >  0 

Let  us  show  that  the  transduction  defines  a  function  h  from  nig/\{e}V;  to  K.  We  suppose 
that  e  =  ii  and  denote  by  v  an  element  of  nig/\{e}Vi  and  by  v  the  element  of  nie/\{e}7?+  Di 
associated  with  v. 

We  define  by  induction  on  a  family  of  functions  hk  from  nie/\{e}Vi  to  Te  \j[0,k*S)  De 
and  prove  by  induction  on  k  that 

Pk  ^  V  v'  yt  <.  k  *  6  [u  =  on  [0,  t]]  ^  hk{v){t)  =  hk{v  )(t)] 


For  A:  =  1  we  define  hi  by: 

Vu  €  ni€7\{e}V;  vt  G  Te  U  [0,6),  h{v){t)  =  finitit).  Clearly  Pi  holds. 

Suppose  we  have  hk  function  to  Te  U[0,k*6)-^  De  which  verifies  Pk.  We 

define  hk+i  by: 

ifteTeU[Q,k*6)hk+i{v){t)  =  hk{v){t).  _ 

if  t  €  Te  U  [ifc  ♦  6,  (ib  +  1)  ♦  6)  /ifc+i(t;)(0  =  f{hk{v){t  -  8)Mt  "  ^)h 
Clearly  Pk  inaplies  Pjt+i 

The  function  h  from  ni6/\{e}V;  to  K  is  defined  by: 

Vt  €  Te,  /i(n)(<)  =  hk{v){t)  where  k\  t  &  [{k  -  1)  *  6,k  *  6) 

The  causality  of  h  follows  from  the  properties  P/t-  ° 


Proposition  2  :  If  M  is  a  temporal  automaton  {I,S,0,T)  then  there  exists  a  unique  causal 
function  from  n.g/V;-  to  HegSucVe  which  satisfies  the  transductions  equations. 


Proof  :  We  must  show  that  there  is  a  function  T  from  n,g/Vi  to  HeesuoK  which  sat¬ 
isfies  the  equations  of  the  transductions.  This  means  that  if  we  have  the  transduction 
{e,A,6Jinit,f)  we  want: 

Vfi€nie/Vi  Vf€  [0,6)nTe  T;(fi)(0  =  /jni<(^  _ ,  ^  ^ 

\/teTet>6  J^eiv)it)  =  f{:Fa,iv)it  “  ^),^a,{v){t  -  6),...)  where  Pe  represents 

the  projection  of  P  on  14. 
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First  we  need  to  introduce  a  function  ord  from  the  set  of  entities  /  U  S'  U  0  to  N.  This 
function  will  have  the  property  that  ord{e)  =  sup{ord{e'),e'  €  V^{e)}  +  1.  It  is  possible  to 
define  such  a  function  because  does  not  have  any  cycles. 

Let  us  show  how.  We  define  the  family  of  functions  d„  by: 
do{e)  =  0  if  X^(e)  =  0;  do{e)  =  u  otherwise. 
d„+i(e)  =  dn{e)  if  d„(e)  7^  w 

d„+i(e)  =  n  +  1  if  We'  €  'T>°(e)  d„(e')  7^  a;  and  dn{e)  =  w 
dn+i(e)  = ‘i' otherwise. 

We  show  that  Ve  3n  \  d„(e)  7^  w.  Let  us  suppose  the  contrary.  Then  for  one  entity  e  we  have 
Vn  €  Ndn{e)  =  u>.  Then  Vn3a(n)  ]  a{n)  €  ^(e)  a-od  d„_i(a(n))  =  u.  But  ^^(e)  is  finite  so 
3ai  €  |  Wn3k  >  n  \  dk{ai)  =  u.  So  according  to  the  definition  of  the  family  <i„,  we  have 

Vn  dn{a,i)  =  w.  If  we  iterate  the  same  demonstration  for  ci  than  for  e  =  oq,  we  can  construct 
a  sequence  (00,01,02,..)  |  Vi  o,+i  €  ^“(o,).  So  Vi  {o,+i, o,+2, ...}  C  A°(o,).  But  A°(e)  is 
finite  (included  in  A(e)).  So  there  must  be  o,-  =  Oj,i  <  j.  But  then  o,-  =  aj  G  A®(a,)  which  is 
impossible.  So  we  have  demonstrated  that  VeSoe  |  dn^{e)  7^  u.  We  define  ord{e)  =  dn^(e).  So 
if  ord(e)  =  A:  >  0  then  by  the  definition  of  dn  we  have  ord(e)  =  sup{ord{e'),  e!  €  I?“(e)}  +  1. 

Now  we  will  prove  that  Ve  G  iSUO  there  is  a  causal  function  from  Iljg/Vi  to  nagA(e)u{e}\/l  u 
which  satisfies  the  equations  of  the  transductions.  We  know  that  (A(e)  U  {e})  \  /  =  A  is 
finite  because  M  is  a  temporal  automaton.  So  3Sa  >  0  |  Vo  G  A  |  60  7^  0  we  have  8a  <  8a- 

We  will  prove  by  induction  on  k  that: 

Wk  >  1  3fj^  a  causal  function  from  n,g/Vi  to  X{a^A{Ta  fl  [0,  fc  *  8a)  Da)  which  satisfies  the 
equations  of  the  transductions. 

In  the  case  A;  =  1: 

if  P°(o)  =  0  i.e.  ord{a)  =  0  we  define  by  Wv  G  H.-e/Vi  Wt  G  [0,  ^^)nro  fi^{v){t)  =  /intta(0- 
is  causal  because  of  this  definition. 

if  ord(o)  =  1  V6  G  I>°(o)  either  6  G  /  or  we  have  just  defined  So  we  can  define 

Wt  G  [0,^^)  n  Ta  fi^iv){t)  =  /a(r6,(u)(<),ri,j(u)(t),..).  Where  rb{v){t)  =  Vb{t)  if  6  G  /  and 
rb{v){t)  =  fi^{v){t)  if  6  €  A.  By  this  definition  is  causal  and  satisfies  the  equations  of 
the  transductions. 

if  ord{a)  =  2  we  can  iterate  the  same  reasoning  and  define  fi^. 

As  A  is  finite  3K  \  Wa  €  A  K  >  ord{a).  So  after  a  finite  number  of  iterations  we  define  a 
causal  function  from  E.g/V;  to  UaeAiTa  H  [0,5^)  Da)  which  satisfies  the  equations  of 
the  transductions. 

Now  suppose  that  this  is  true  for  k.  We  define  in  the  following  way: 
if  ord{a)  =  0  ,  V6  G  T>{a)  we  denote  by  niv),  U(,  if  fc  G  /  or  /jt^(fi)  if  6  €  A.  Vu  G  E.g/Vl- 

if  (  6  [0,  t .  Si)  n  T.  /4, .(«)(()  =  /^ («)(() 

if  <  G  [A:  ♦  8a,  (fc  +  1)  *  8a)  n  To  n  [0,  ^a)  /jt+la(^)(0  ~  finitajt)  _ 

if  t  G  [A:  ♦  8a,  (A:  +  1)  ♦  H  r„  H  [^a,  00)  fk+iS^)it)  =  /a(r6,(v)(t  -  8a),  rb,{v)it  -  8a), ...). 
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As  Sa  >  Sa,  t  —  Sa  <  k*6A-  This  definition  is  causal  and  satisfies  the  transductions  equations 
since  all  its  components  do. 

If  ord{a)  =  1  ,  then  V6  €  either  6  €  /  and  we  denote  rb{v)  =  vt,  or  ord{b)  =  0  and 

we  denote  by  rj  the  function  fk+i,,  that  we  have  just  defined. 

it  i  €  |o,  i  t  s^)  n  r.  /iVi. («)(()  =  _  _ 

it(  €  l)»«j)  nT.  /tVi.WW  =  /.(’■», («)(i).ri,(0)(i),..)- 

This  definition  implies  that  is  causal  and  satisfies  the  transductions  equations. 

As  in  the  definition  of  we  can  iterate  this  construction  on  the  value  of  ord.  We  will  stop 
because  A  is  finite. 

So  we  can  define  the  function  f^+i- 

So  by  induction  we  have  Vfc  >  1  3f^  a  causal  function  from  n,g/Vi  to  nagyi( To  fl  [0,  A:  * 
(5j4)  — >  Da)  which  satisfies  the  equations  of  the  transductions. 

We  will  now  construct  a  causal  function  from  n,£/Vi  to  Ha^A^a  which  satisfies  the 
equations  of  the  transductions.  We  define  by: 

Vu  €  Ui^iVi  Vt  €  [{k  -l)*6A,k*  6a) 

f^iv)ii)  =  fkS^)li) 

This  definition  implies  that  is  causal  and  that  it  satisfies  the  transductions  equations 
because  of  the  construction  of  the  f^. 

Let  us  show  now  that  if  e  €  (A(a)  U  {a}  \  /)  H  (A(6)  U  {6}  \  I)  then  we  have  =  ff, 
where  A  =  A(a)  U  {a}\I  and  B  =  A(6)  U  {b}  \  I.  Let  us  suppose  the  contrary.  Then 
3uo  €  n.e7V-  3to  \  ff(vo)(to)  ^  /f(vo)(to). 

But  we  have  a  transduction  (e,'D(e),Se,  fe)  and  and  satify  the  equation  of 
that  transduction.  _  _ 

if  =  0  we  have  /e(/^(db)(<o),  — )  ^  fe(/^(vo)(to),  •••)•  So  3e'  €  T^(e)  3t'  <  to  1  f^(vo)(t')  # 

f^{vo){t')  and  ord(e')  <  ord(e).  _ 

if  5e  >  0  we  have  /e(/^(db)(to  — ^e),— )  ^  /e(/^(db)(Ao  — ^e),  •••)•  So  3e'  €  I>(e)  3t'  <to-6e  \ 
f^mt')  ^  f^ivo){t') . 

Note  that  to  <  8^  is  impossible  because  //  and  ff  are  both  then  equal  to  finiu- 

If  we  have  =  min{6A,6B)  then  we  have  show  that: 
if  3e  €  A  D  5  such  that 
3<!i  €  His/V;  3(o  1  4  ffi'SotU) 

then  3e'  €  Ar\  B  3i0  such  that  either  ord{e')  <  ord{€)  or  tj,  <  to  “  and  /^(ub)(to)  ^ 

We  can  iterate  and  construct  an  infinite  sequence.  But  as  ord  has  an  upper  bound  on 
A  U  J5  we  must  decrease  to  by  at  least  So  an  infinite  number  of  time.  So  the  time  should  be 
negative  which  is  impossible.  So  we  have  /^  =  /®. 

Now  we  can  construct  T  by  defining  Tt  —  Then  .F  is  a  causal  function  which 

satisfies  the  equations  of  the  transductions  since  the  functions  do. 
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We  can  prove  that  ^  is  unique  with  the  same  arguments  used  to  prove  that 

Proposition  3  ;  //Mi  =  (/i,Oi,/i)  and  Mj  =  {h,02j2)  are  two  causal  systems  and  W 
is  a  wiring  over  Mi, M2,  such  that  e  >  e'  €  W  implies  e  e  0i  and  e'  G  h  then  the  system 
induced  by  the  wiring  W  over  Mi  and  M2  is  a  causal  system. 

Proof :  Let  O  be  the  subset  of  output  entities  of  Mi  that  are  connected  to  M2. 

Let  I  be  the  subset  of  input  entities  of  M2  that  are  connected  from  Mi. 

We  will  prove  that  (/i  U  {I2  \  /)?  j5i  U  52  h)  /,  {0i  \  0)  U  O2)  and  a  causal  function  defined 
in  terms  of  fij2,  and  the  connections  is  a  causal  system. 

51  is  related  h  U  {I2  \  /)  by  a  causal  function  since  it  is  to  h  by  fi. 

52  U  /  is  related  to  /2  =  /  U  {h  \  /)  by  a  causal  function  /2,  but  I  is  related  to  0  by  the 
connections  functions  and  O  is  related  to  Ii  by  fi.  So,  52  U  /  is  related  to  Ii  U  {I2  \  /)  by  a 
causal  function. 

0i  \  0  is  related  to  Ii  by  fi. 

O2  is  related  to  /2  =  /  U  {h  \  /)  by  /2  so  with  the  same  argument  as  for  S2,  O2  is  related 
to  7i  U  {I2  \  /)  by  a  causal  function.  □ 

Proposition  4  ;  If  Mi  =  (/i,5i,0i,Ti)  and  M2  =  (/2, 52,  02,^2)  are  two  temporal  au¬ 
tomata  and  W  is  a  wiring  over  Mi,  M2,  such  that  e  >  e'  €  W  implies  e  £  0i  and  e  £  I2 
then  the  system  induced  by  the  wiring  W  over  Mi  and  M2  is  a  temporal  automaton. 


Proof  :  Let  0  be  the  subset  of  output  entities  of  Mi  that  are  connected  to  M2. 

Let  I  be  the  subset  of  input  entities  of  M2  that  are  connected  from  Mi. 

We  will  prove  that  (/iU(/2\/),  5iU52U7UO,  (0i\0)U02)  with  appropriate  transductions 
is  a  temporal  automaton  equivalent  to  the  system  induced  by  the  wiring  of  Mi  and  M2. 

For  e  €  =  5i  U  52  U  7  U  0  U  (0i  \  0)  U  O2  we  take  the  following  transduction: 

-  if  e  €  5i  U  52  U  0i  U  O2  tbe  same  transduction  as  in  Ml  or  M2, 

-  if  e  €  7  then  3o  €  O  |  o  >  e  and  we  take  the  transduction  (e,{o},0,0,id)  where  id  is  the 

identity  function. 

It  is  obvious  that  Ve  £  E,  A(e)  is  finite. 

Let  us  now  show  that  We  £  E,e  ^  A®(e). 

If  e  €  5i  U  0i  this  follows  from  the  fact  that  Mi  is  a  temporal  automaton. 

If  e  €  7  then  V^{e)  =  {0}  and  so  A“(e)  =  {0}  U  A°(o)  which  is  included  in  7i  U  5i  U  {0}  so 

e  ^  A®(e). 

If  e  €  52  U  O2  then  A°(e)  =  A^^(e)  U  U,g/nA0,^(e)A«(i).  But  e  ^  A^^(e)  because  Mj  is  a 
temporal  automaton  and  Ujg/nA5^^(e)^**(0  ^  (^1  U  5i  U  0),  so  e  ^  A  (e). 
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The  system  we  have  defined  with  our  new  transductions  is  then  a  temporal  automaton. 
Furthermore  it  is  equivalent  to  the  system  induced  by  the  wiring  of  Mi  and  M2.  Each  entity 
of  511152  1)0111  O2  has  the  same  transduction  and  if  i  is  an  entity  of  I  its  transduction 
implies  that  'it  €  T,-  Vi{t)  =  vl{t)  which  is  exactly  the  behavior  induced  by  the  connection. 

□ 

Proposition  5  :  Let  Mi, M2,..., Mn  be  n  temporal  automata  andW  a  wiring  over  Mi, M2,..., Mn 
such  that  ie  if  e  >  e'  €  W  then  e  has  a  durational  transduction.  The  system  induced  by  W 
over  Mi,M2,...,Mn  is  a  temporal  automaton. 

Proof  :  We  denote  by  0,-  the  set  of  output  entities  of  Mi  which  are  connected  to  other 
entities  and  by  /,•  the  set  of  input  entities  of  M,  which  are  connected  from  other  entities. 

n  _  _  ” 

We  will  prove  that  [J(5,-  U  O,-  U  /,)  U  |J(0,'  \  O,))  is  related  to 

»=i  t=i 

n 

[J  (/,■  \  /,)  by  a  causal  function. 

«=i 

n  n  _  _  _ 

We  will  show  that  the  system  \  L),  U  O,  U  /,),  1^(0;  \  0,))  and  the  sets  ol 

»=i  «=i  «=i 

n  _ 

transductions  of  M,  and  the  transductions  Ve  €  (e,  {e'},0, 0,id),  where  e'  is  such  that 

t=i 

n 

e'  €  ijOt  and  >  e  is  a  temporal  automaton. 
i=l 

n 

For  this  system  if  Ve  €  U(‘5j  U  O,  U  If)  we  have  A(e)  finite  and  e  ^  A®(e)  then  by 

t=i 

definition  the  system  is  a  temporal  automaton. 

Let  us  show  that  the  case  where  Vo,-  €  0,-,  o,  has  a  durational  transduction  is  a  particular 
case  where  this  property  holds. 

n 

As  the  number  of  connection  is  finite,  Ve  €  |J(5,-  U  0,-  U  J,-)  the  cardinality  of  A(e)  is  at 

t=l 

most  increased  by  (number  of  connections)*maXeg,jO;(cardinal(Ao/d(e))). 

n 

Now  Ve  €  I ''  >  e  we  have  A°(e)  =  {e'}  because  A®(e')  =  0  since  e'  has  a  durational 

t=l 

transduction. 

n 

Then  Ve  €  (J(5,-U0,-),  if  e  e  5,-UO,-,  A°(e)  is  equal  to  the  union  of  A^.(e)  and  eventually 

t=l__  _ 

a  subset  of  {a  €  €  ^jOj  |  a'  >  a}.  So  e  ^ 
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n  _  n  _  _  ^ 

We  have  proof  than  the  system  |J(/,-  \  /,),  ^(5,  U  O,  U  /,),  lj(0,-  \  0,))  and  the  sets  of 

«=i  «=i  t=i 

n 

transductions  of  Af,  and  the  transductions  Ve  €  (J/,-  (e,  {e'},0,0,?d)  (where  e'  is  such  that 

t=i 

n 

e'  €  [Jo,’  and  e'  >  e)  verifies  the  definition  of  a  temporal  automaton. □ 

t=i 

Appendix  B 

In  this  appendix  we  present  the  temporal  automaton  implementing  the  digital  watch  de¬ 
scribed  in  section  5.2. 

There  are  5  input  entities  which  are  all  defined  on  continous  time  (  time  structure  equal 
to  i?"*"),  a,  6,  c,  d  and  power.  The  first  four  represent  the  status  of  the  four  buttons  and  their 
value  will  be  1  if  the  button  is  depressed  and  0  otherwise.  The  last  one  is  the  the  information 
from  the  battery  and  can  have  3  different  values  {on,  weak,  dead}. 

Each  of  the  internal  and  output  entities  will  be  defined  oniV£  =  {A:*e|A;€  N}  where 
e  =  10  milliseconds  is  the  precision  of  the  watch  and  the  minimal  time  between  changes  in 
the  watch. 

There  are  7  output  entities.  The  delay  of  all  the  output  entities  will  be  0  since  as  you  will 
see  they  are  only  transcriptions  of  internal  entities.  Four  of  the  output  entities  will  be  orders 
for  the  display  of  the  four  small  areas  of  the  watch.  There  are  all,  al2,  chime  and  djpower. 
The  value  of  the  first  three  will  be  {on,off, none}  and  for  the  forth  [good,  weak,  none}.  The 
fifth  output  is  light  which  will  take  its  value  in  {on,off},  the  sixth  is  beeper  with  values  in 
{beep,  silent}  and  the  last  is  display  which  will  represent  what  to  display  on  the  main  area 
of  the  watch. 

The  internal  entities  can  be  divided  in  4  groups.  The  first  contains  entities  which  keep 
track  of  the  different  modes  of  the  watch.  These  entities  are  mainjmode,updatejrnode, 
timejnode,  chrono-mode,updal\jmode  and  updal2jnode. 

The  second  group  contains  alarmljstat,alarm2^tat  and  chime^tat  which  encode  the 
status  of  these  features.  Their  domain  will  be  {enabled,  disabled}. 

The  third  group  is  used  to  implement  the  different  time-out  behaviors.  Such  entities  will 
be  2s,  30s  and  2min.  Their  domain  will  be  R. 

The  last  group  contains  entities  which  are  data.  They  are  time,  date,  allJime,  al2Jime 
and  chrono.  Their  domain  is  R  and  they  will  be  used  by  the  output  entity  display  to  dra\\’ 
the  main  area  of  the  watch. 

All  the  internal  entities  will  have  as  time  structure. 
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The  entity  mainsnode  will  encode  the  mode  of  the  watch.  Its  possible  values  are 
{<tm,  dat,  update,  alarm!,  alarmfl,  updalarml,  updalarm2,  chime,  stopwatch} .  It  transduc¬ 
tion  is  [mainjmode,  {mainjrnode,  a,  b,  c,  d,  2s,  2min,  update  jnode,  updalljmode,  updal2.mode} , 
€,  {Q,tim),  f).  The  function  /  of  9  variables  m,a,b,c,d,2s,2min,upm,um\,um2  {m,upm, 
um\,  um2  are  the  abbreviations  for  mainjmode,  updatejmode,  updalljmode  and  updal2jmode) 
is  defined  by; 

f{m,  a,  b,  c,  d,  2s,  2mm,  upm,  um\,um2)  = 


dat 

m  =  tim  Ad  =  1 

tim 

m  =  dat  A  d  =  1 

tim 

m  ^  {tim,  update}  A  2mm  =  0 

update 

m  =  tim  Ac=lA2s  =  0 

tim 

m  =  update  Ab  =  1 

tim 

m  =  update  A  upm  =  mode  A  c  =  1 

alarml 

m  =  tim  A  a  =  1 

updalarml 

m  =  alarml  Ac  =  1 

alarml 

m  =  updalarml  Ab—1 

alarml 

m  =  updalarml  A  uml  =  min  A  c  =  1 

alarm2 

m  =  alarml  Aa  =  1 

updalarm2 

m  =  alarm2  Ac  =  1 

alarm2 

m  =  updalarm2  Ab  =  1 

alar  m2 

m  =  updalarm2  A  um2  =  min  A  c  =  1 

chime 

m  =  alarm2  Aa  —  1 

stopwatch 

m  =  chime  Aa  —  1 

tim 

m  =  stopwatch  A  a  =  1 

m 

otherwise 

The  notation: 

/(...)  =  ul  cl 
v2  c2 

means  that 

/(...)  =  if  cl  then  t>l 

elsei  f  c2  then  v2 

elseif  ...then ... 

The  entity  2mm  is  used  to  implement  the  time-out  that  forces  to  return  in  the  time  mode. 
Its  transduction  is  (2mm,  {mainjmode,  a,  d,  2mm},  e,  (0, 0), s').  The  function  g  is  defined  by: 

g{m,a,d,2min)  =  120  —  c  m  =  timAd=l 

120  —  e  m  €  [tim,  alarml,alarm2,  chime}  A  a  —  1 
2mm  —  e  2mm  >  0 
2mm  otherwise 


34 


The  entity  2s  is  almost  similar.  Its  transduction  is  {2s,{mainjnode,c,2s},  e,  (0,2),/;) 
where  h  is: 


h{m,  c,  2s)  =  2s  —  e  2s<2Ac=lAm  =  iim 
2  —  c  m  =  tim  A  c  =  1 
2  otherwise 


The  entity  updatejmode  encodes  what  unit  is  updated  by  an  event  d.  Its  values  are 


{none,  second,  min,  lOmin,  hour,  month,  dat, 
{mainj7iode,b,c,updatejnode},  e,  (0,  none), 

k{m,  b,  c,  upm)  =  none 
none 
second 
min 
lOmin 
hour 
month 
dat 
day 
year 
mode 
upm 


day,  year,  mode).  Its  transduction  is  {updatejiwde, 
k).  The  function  k  is  defined  by: 

m  ^  update 
6=1 

m  =  update  A  upm  =  none 
upm  =  second  A  c  =  1 
upm  =  min  A  c  =  1 
upm  =  lOmfn  A  c  =  1 
upm  =  hour  A  c  =  1 
upm  =  month  A  c  =  1 
upm  =  dat  A  c  =  1 
upm  =  day  A  c  =  1 
upm  =  year  A  c  =  1 
otherwise 


The  value  of  the  entity  time  is  the  current  time  calculated  by  the  watch.  Its  transduction 
is  (time,  {d,  update jnode,  time},  e,  (0,0),/)  where  /  is  the  following  function: 

/(d,  upm,  time)  =  mod  4-  {time,  1, 60)  upm  =  second  A  d  =  1 

,  mod  +  {time,  60, 600)  upm  =  min  A  d  =  1 

mod  +  {time,  600, 3600)  upm  =  lOmin  A  d  =  1 

mod  +  {time,  3600, 86400)  upm  =  hour  A  d  =  1 

mod{time  +  e,  86400)  otherwise 

The  function  mod  is  the  usual  modulo  function  and  mod+(x,  a,  b)  =  b*div{x,  b)+mod{x+a,  b) 
where  div  is  the  integer  division. 

The  entity  date  is  similar  to  time  but  encodes  the  date.  We  suppose  we  have  functions 
addjday,  addjweekjday,  addjnonth,  add-year,  addjujday  that  given  a  date  return  a  new  date 
incremented  by  a  day,  a  day  of  the  week,  a  month,  an  year  or  a  day  and  a  day  of  the  week. 
The  transduction  of  date  is  {date,  {d,  updatejmode,  time,  date),  e,  (0, 0),  /I)  with: 


/l(d,  upm,  time,  date)  = 


addjday{date) 

add-weekjday{date) 

addjmonth{date) 

add-year  {date) 

add-ajday{date) 

date 


upm  =  dat  A  d  =  1 
upm  =  day  A  d  =  1 
upm  =  month  A  d  =  1 
upm  =  year  A  d  =  1 
time  =  86400  —  e 
otherwise 
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The  entity  timejnode  keeps  track  of  how  to  display  the  time.  Its  value  are  {24/i,  amfpm  ) . 
Its  transduction  is  (timejnode,{d,  updatejmode^  timejmode},  e,  (0,24/i),/2)  with: 

I2(d,  upm,  tm)  =  24h  upm  —  mode  A  d  =  1  A  tm  =  am/ pm 

am /pm  upm  =  mode  A  d  =  1  A  tm  =  24h 

tm  otherwise 

The  entity  alarml^tat  is  very  simple.  Its  transduction  is  {alarml^tat,  {mainjmode,  d. 
alarml^tai),  e,  {0, disabled),  13)  with: 

I3{m,d,alls)  —  enabled  m  =  alarml  A  d  =  1  A  alls  =  disabled 

disabled  m  =  alarml  A  d  =  1  A  alls  =  enabled 

alls  otherwise 

The  entities  alarm2^tat  and  chime^tat  are  similar  except  that  they  are  for  the  second 
alarm  and  chime  mode. 

The  entity  updalljmode  is  quite  identical  to  updatejnode  but  simpler.  Its  values  are 
{none,  ^our,  lOmzn,  min},  transduction  is  (updalljmode,  {mainjmode,  c,  updalljmode},  e, 
(0,  none),  14)  with: 


/4(m,  c,  updallm)  =  hour 

m  =  alarml  Ac  =  1 

none 

updallm  =  min  A  c  =  1 

none 

m  7^  updalarml 

10mm 

updallm  =  hour  A  c  =  1 

min 

updallm  =  lOmin  Ac  =  1 

updallm 

otherwise 

The  entity  updal2jmode  is  identical  to  updalljmode  for  the  second  alarm. 

The  entity  alarml  Jime  encodes  the  time  of  the  first  alarm  and  has  transduction  (alarmlJime, 
{updalljmode,  d,  alarmlJtime},  e,  (0, 0),  /5)  with: 

I5{uml,d, allt)  =  mod  +  (allt, 3600, 86400)  itml  =  hour  Ad  =  1 
mod  +  (allt,  600, 3600)  nml  =  lOmin  A  d  =  1 

mod  +  (allt,  60, 600)  «ml  =  min  A  d  =  1 

allt  otherwise 

The  entity  alarm2Jime  is  similar  to  alarmlJime. 

The  entity  chronojmode  indicates  whether  or  not  the  chronograph  is  running  and  has 
value  in  {run,  o//}.  Its  transduction  is  (chronojmode,  {mainjmode,b,d, chronojmode},  e, 
(0,o//),/6)  with: 

/6(m,  b,  d,  chrm)  =  run  m  =  stopwatch  A  6  =  1  A  chrm  —  off 

off  m  =  stopwatch  A  6  =  1  A  chrm  =  run 

off  m  =  stopwatch  A  d  =  1 

chronojmode  otherwise 
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The  entity  chrono  keeps  track  of  the  chronograph’s  time.  Its  transduction  is  (chrono, 
{mainjmode,  d,  chrono.mode,  chrono},  e,  (0, 0),  17)  with: 

I7(m,  d,  chrm,  chrono)  =0  m  =  stopwatch  ^d=l 

chrono  +  e  m  =  stopwatch  A  6  =  1  A  chrm  =  of  f 
chrono  m  =  stopwatch  A  6  =  1  A  chrm  =  run 
chrono  chrm  =  off 
chrono  +  c  chrm  =  run 

The  entity  305  indicates  how  long  the  beeper  must  beep.  Its  transduction  is  (305,  {time, 
alarmldime,  alarm2Jime,  alarml^tat,  alarm2jstat,  a,  b,  c,  d,30s},  e,  (0,0), /8)  with: 

I8{time,  allt,  al2t,  alls,  al2s,  a,  b,  c,  d,  305)  = 

30  time  =  allt  A  alls  =  enabled 

30  time  =  al2t  A  al2s  =  enabled 

0  a=lV6=lVc=lVd=l 

305  —  e  305  >  0 
0  otherwise 

We  can  now  present  the  output  entities.  Four  of  them  are  quite  similar  and  rather  simple: 
d-power,all,al2  and  chime  display  in  the  four  small  areas  of  the  watch.  The  transduction 
of  d.power  is  {d.power,  {power},  0,  0,  {{on, good),  [weak,  weak),  {dead,n(me)}).  The  trans¬ 
duction  of  a/1  is  (a/1,  {potaer,  a/arml-s/a/},  0, 0, /9)  with: 

l9{power,  alls)  —  none  power  —  dead 
on  alls  =  enabled 

off  alsl  =  disabled 

The  transduction  of  a/2  and  chime  are  almost  similar  and  are  omitted. 

The  entity  light  is  on  if  the  light  of  the  watch  has  been  switched  on.  Its  transduction  is 
(light,  0,  {power,  b},  0,  o)  with: 

o(power,  b)  =  o ff  power  =  dead 
on  6=1 
off  otherwise 

The  entity  beeper  uses  305  to  beep  at  the  right  instant.  Its  transduction  is  (beeper, 
{power,  time,  305,  chime^tat},  0, 0,p)  with: 

p(power,time,alls,al2s,S0s,chs)  =  silent  power  =  dead 

beep  chs  =  on  /\  moc/(/zme,  3600)  €  [0,2] 
beep  305  0 

silent  otherwise 


37 


The  last  output  entity  display  presents  on  the  main  area  of  the  watch  the  appropriate 
data.  Its  transduction  is  {display,  {power,  mainsnode,  time,  date,  updatejnode,  alarmlJime, 
alarm2Jime,  chrono,  timejinode},0, 0,  q)  with: 

q{power,  m,  time,  date,  upm,  allt,  al2t,  chrono,  tm)  = 


none 

date 

date 


allt 

al2t 

chrono 

display2ih{time) 
display  am  f  pm{time) 


power  =  dead 
m  =  dat 

upm  G  {month,  date,  day,  year} 
m  G  {alarml,updalarml} 
m  G  {a/arm2,  updalarm2} 
m  =  stopwatch 
tm  =  24/i 
tm  =  am  I  pm 


This  temporal  automaton  implements  the  digital  watch  described  at  the  beginning  of 
this  section. 


Appendix  C 

Proposition  Q  :  A  deterministic  one-tape  Turing  machine  (abbreviated  DTM)  can  be  mapped 
onto  a  temporal  automaton. 

As  a  proof  of  proposition  6  we  will  present  a  temporal  automaton  which  performs  the 
same  computation  as  a  one-tape  deterministic  Turing  machine. 

Let  us  take  a  DTM  with  the  following  features: 

1.  A  finite  set  T  of  tape  symbols,  including  a  subset  E  C  F  of  input  symbols  and  a 
distinguished  blank  symbol  6  G  F  \  E; 

2.  A  finite  set  Q  of  states,  including  a  distinguished  start-state  qo  and  two  distinguished 
halt-states  qy  and  qn', 

3.  a  transition  function  S:  {Q  \  {qy,qn})  xT  —*  Q  xT  x  {—1,  -t-1}. 

We  will  construct  a  temporal  automaton  whose  input  is  a  string  a:  G  E*  and  whose  output 
will  be  o  G  {yes,  no}  if  the  DTM  will  reach  states  qy  or  (  it  will  be  equally  possible  to 
output  the  result  of  the  computation  of  DTM  on  x). 

Let  N  be  the  time  structure  of  all  entities  of  the  temporal  automaton  M. 

M  has  one  input  i  whose  domain  Dj  is  E  U  {end,  reset} 

M  has  6  internal  entities: 
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-  Sc  whose  domain  is  =  {read,  compute} 

-  Stape  whose  domain  is  =  F* 

-  Sn  whose  domain  is  £>j„  =  Z 

-  Sinf  whose  domain  is  =  Z 

-  Saup  whose  domain  is  =  Z 

-  s  whose  domain  is  D,  =  Q 


M  has  one  output  o  whose  domain  is  Do  =  {±, yes,  no}. 

For  all  the  internal  and  output  entities  the  delay  8  will  be  the  same  and  equal  to  1. 
The  transduction  of  o  is  from  s  and  its  init  value  is  ±. 


yes  if  Va{t  -  1)  =  qy 
no  if  Vs{t  -1)  =  qn 
±  otherwise 


The  transduction  of  Sc  is  from  i  and  its  init  value  is  read. 


{compute  if  u,(<  —  1)  =  end 

read  if  Vi{t  —  1)  €  S  U  {reset} 


This  entity  Sc  keeps  the  state  of  M  and  allows  to  alternate  between  computation  and  reading 
a  string  of  input. 

Let  us  now  bring  in  some  notations  to  specify  the  other  entities  more  easily.  At  first  a 
few  functions  on  F*  (set  of  the  finite  lists  of  elements  €  F): 

/  :  X  F*  ^  F  /(n,  /)  return  the  element  of  I 

add—  :  F  X  F*  ^  F  add  —  (e,  /)  return  the  list  with  head  e  and 

tail  I 

add+  :  F  X  F*  — »  F  add  +  (e,  1)  return  the  list  with  last  element 

e  and  beginning  by  I 

repl  :  N  xT  xT*  repl{n,  e,  /)  return  a  list  V  identical  to  I 

except  that  the  element  of  /'is  e. 

Now  a  few  abbreviations: 

/  =  Vi{t  -  1),  tape  =  v„,p.(<  -  1),  k  =  -  1)  -  -  1)  +  1, 

Sc  =  V,^{t  -  1) 

-  l),/(/:,tape))]i 
62  =  [<S(u,(i  -  l),f{k,tape))]2 
<53  =  -  1),  f  (k,tape))]3 

where  [  ],•  return  the  element  of  a  tuple. 

At  last  a  few  notations  for  conditions: 

Cl  :{sc  =  compute)  A  (u,(t  -  1)  ^  {9y,9n}) 

C2  :{S3  =  1)  A  {va„{t  -  1)  =  -  1)) 
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Ca  :(<53  =  -1)  A  (v,„(t  -  1)  =  Vs,„,(t  -  1)) 

The  init  value  of  Sn  is  1  and  its  transduction  is: 


V 


«n 


1 

-  1)  +  <^3 


if  Sc  =  read  or  i  =  reset 
if  Sc  =  compute  and  i  /  reset 


The  init  value  of  Sjn/  is  1  and  its  transduction  is  : 


{1  if  (sc  =  read)  V  (z  =  reset) 

Va-nfit  —  1)  -  1  if  {sc  =  compute)  A  {i  ^  reset)  A  Cz 
—  1)  otherwise 

The  init  value  of  Ssup  is  0  and  its  transduction  is  : 


'0  if  z  =  reset 

‘^ssupii  -  1)  +  1  if  (5c  =  read)  A  (i^  reset) 

Va,^p{t  —  1)  +  1  if  {sc  =  compute)  A  (z  7^  reset)  A  C2 
.  -  1)  otherwise 


At  each  time  s„  represents  the  position  of  the  reading  head  of  the  DTM,  Sinj  the  position 
of  the  first  element  of  stape  and  Sg^p  the  position  of  the  last  element  of  Stape  on  the  infinite 
tape  of  the  DTM. 

The  init  value  of  Stape  is  ()  the  empty  list  and  its  transduction  is: 


Vstap.{t)  = 


0 

add  +  {i,tape) 

add  +  (6,  repl{k,  62,  tape)) 

add  —  (6,  repl{k,  62,  tape)) 

repl{k,62,tape) 

^  tape 


if  z  =  reset 

if  (5c  =  read)  A  (z  ^  reset) 
if  Cl  A  (z  ^  reset)  A  C2 
if  Cl  A  {i^  reset)  A  Cz 
if  Cl  A  (z  7!^  reset)  A  -'C2  A  -'Cz 
otherwise 


The  init  value  of  s  is  qo  and  its  transduction  is: 


z;,(<)  =  •{ 


Qo 

Si 

Va{t  -  1) 


if  Sc  =  read 
if  Cl 

otherwise 


The  machine  M  which  we  have  constructed  can  be  used  to  compute  the  algorithm  of  the 
DTM.  For  this,  put  into  its  input  the  string  x  of  S*  ended  by  a  stop.  M  will  at  first  save 
the  input  string  and  then  compute  the  algorithm  of  the  DTM.  If  the  DTM  would  end  its 
computation  then  M  give  as  output  whether  or  not  the  DTM  would  accept  a:  as  a  element  of 
the  language  that  the  DTM  recognizes.  M  can  also  be  reset  to  undertake  a  new  computation 
by  sending  to  the  input  a  reset. □ 
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